Permissions Anti-Bypass

Description

Permissions Anti-Bypass is a host-side security mod for Supermarket Together that enforces the game’s permission system on the server.

Normally, a modified client may be able to send certain game commands directly and bypass the permissions the host has disabled. This mod validates those actions on the host before they are allowed to execute.

The mod does not change which permissions you give players, it simply makes those permissions much harder to bypass.

Installation instructions

Requires BepInEx 5. 4. 23. 4.

• []Install BepInEx for Supermarket Together.[/]

  []Download the mod.[/]

  []Place STHostPermissionGuard.dll inside:

  Supermarket Together/BepInEx/plugins[/]

  Main features

  Server-side permission enforcement

  Permission checks are performed by the host instead of trusting the connecting player’s client.

  Protects major store actions

  The mod guards a large number of multiplayer commands including things such as:

  • []Building, spawning, moving, and deleting objects[/]

    []Store money and management actions[/]

    []Product pricing and sales[/]

    []Employee management[/]

    []Stocking and storage interactions[/]

    []Checkout actions[/]

    []Security tools[/]

    []Brooms and other equipped tools[/]

    []Painting and decoration editing[/]

    []Store name/color changes[/]

    []Manufacturing and ordering systems[/]

    []Chat permission[/]

    []Expansion and upgrade controls[/]

  Raw permission validation

  The mod checks the host’s actual permission state for:

  • []Global[/]

    []Manager[/]

    []Cashier[/]

    []Restock[/]

    []Security[/]

    []Talk[/]

  This prevents client-side mods from simply changing their own permission check result.

  Equipped-item protection

  Tool switching is also validated on the host, preventing players from directly equipping restricted tools without the required permission.

  Unknown-command auditing

  The mod can log remote multiplayer commands that are not currently protected, which helps identify new bypass methods after game updates.

  Requirements

  []Supermarket Together[/]

  []BepInEx 5. 4. 23. 4

  Reporting Permission Bypasses

  If a player manages to perform an action that should have been blocked by your lobby permissions, please report it so the bypass can be patched.

  Permissions Anti-Bypass automatically creates a dedicated diagnostic log at:

  Supermarket Together\BepInEx\STHostPermissionGuard.log

  This log is much smaller than the normal BepInEx log and contains information specifically related to permission enforcement, including blocked actions, suspicious or currently unguarded multiplayer commands, and basic plugin diagnostics.

  To report a bypass:

  • []Launch the game and host your lobby normally.[/]

    []Reproduce the permission bypass if possible.[/]

    []Close the game after the incident.[/]

    []Locate

    BepInEx\STHostPermissionGuard.log

    []Upload the log to a file-sharing service and include the link in your Nexus bug report.[/]

    []Describe what the player was able to do and which permission was disabled at the time.

  The diagnostic log is cleared automatically on each game launch by default, so try to send it before starting another session.

  If the dedicated log does not contain enough information, I may also ask for your full:

  Supermarket Together\BepInEx\LogOutput.log

  Game updates may add or change multiplayer commands. If you discover a new bypass, reporting it with the diagnostic log is the fastest way to get it identified and added to the guard.

  Note: This mod is designed to strengthen Supermarket Together’s existing permission system. Game updates may introduce new multiplayer commands that require additional protection. If you find an action that bypasses permissions, please report it with your BepInEx L