SE, Please fix this FC exploit

[Niwashi]

I think the issue is that ranks are customizable rather than ordered. If you have "officer in charge of activity A", "officer in charge of activity B", and "officer in charge of activity C", you can customize their individual titles and privileges, but there isn't any inherit order making one of those more important than the other two. You've got multiple ranks with different names and perhaps different privileges to go along with their individual responsibilities, but they're all on the same level. It seems like the entire ranking system in XIV is an extension of that.

Anyone you give promotion/demotion privileges to is assumed to be responsible for setting other players' ranks, irrespective of where those are, because "where those are" is meaningless. There aren't really ranks that are "above" or "below" any others, just ranks that have different sets of privileges. The real problem is that this fact isn't obvious. The ranks appear to be ordered, but their number is simply where to display them in the list rather than an actual higher-ranking / lower-ranking order.

I do think something needs to be done about this problem. But it would likely require first making the rank level itself more customizable than it currently is. Once you can specify which ranks share the same level as opposed to those that are genuinely higher or lower, then they'd be able to add a rule that you can promote/demote only between ranks lower than or equal to your own.

[Brine_Gildchaff]

I do think something needs to be done about this problem. But it would likely require first making the rank level itself more customizable than it currently is. Once you can specify which ranks share the same level as opposed to those that are genuinely higher or lower, then they'd be able to add a rule that you can promote/demote only between ranks lower than or equal to your own.

How about, as a slightly altered solution, it could be set up that you cannot give someone permissions (whether by promotion or altering a rank's permissions) that you yourself do not possess?

[Altiret]

Back before SE implemented activity logs for the FC chest our FC had all of it's gil stolen by a member. It wasn't an RMT - just a selfish thief. However SE's take on it was "you gave them access to the chest, and gave him the right to access the gil. You shouldn't have trusted him."

So I know first hand how this type of thing sucks.

I agree that you shouldn't be able to promote above your own rank - that would be the same as allowing someone to promote themselves.. (though if you can promote above your own rank, you probably CAN promote yourself.. I should try that.. )

However I don't think it's unreasonable to restrict promotion to a very small trustworthy group of people. It's not like you have to go changing peoples ranks on a daily basis. (I should also qualify that our FC is relatively small (<100) and for the most part we all know each other pretty well. So in fairness, if you have a very large FC, it might be different. )