Workspace.FilteringEnabled is not working properly

[its_DevelopTime]

Workspace.FilteringEnabled seems to work strange in player characters

e.g.
when a localscript destroys a BoolValue inside LocalPlayer.Character, the server also destroys this object

is this normal?

Sorry for my english.

[notchloeno (chloe)]

Just tested this.
Server side code, in ServerScriptService:

game.Players.PlayerAdded:Connect(function(player)
	Instance.new("BoolValue", workspace:WaitForChild(player.Name))
end)

Client side code, in StarterCharacterScripts (in a LocalScript):

local val = game:GetService("Players").LocalPlayer.Character:WaitForChild("Value")
val:Destroy()

Server side:

Client side:

I’ve also verified that the BoolValue is created on the server side and replicated to the client.

[snorebear]

That is because the Player has network ownership of the character. All (maybe it’s limited) changes made to the character are replicated to the server.

[notchloeno (chloe)]

After some testing I’ve found that whilst the client can Remove() or Destroy() anything within the character, and have that replicated across the Client-Server Boundary, they cannot do the same when they change properties of anything within the character Model, or instantiate any new instances within the character Model.

[its_DevelopTime]

thanks for answering
but it’s too weird
a boolValue is not a physical object, it should not be affected by NetworkOwnership

[notchloeno (chloe)]

A Part, or any other “physical object”, is just an Instance, as is everything else in a Roblox game. The player has network ownership of every Instance in their Character, which includes BoolValues.

[its_DevelopTime]

In summary:
a localscript cannot instantiate new objects
a localscript cannot change object properties
but a localscript can destroy an instance with Ownership?

[colbert2677 (ImagineerColbert)]

This is actually somewhat of a bug that has been reported several times over before. Network ownership has nothing to do with it, because that’s related to BaseParts only (cc @snorebear @plasmascreen). I can’t remember if there was any conclusive staff response regarding it.

@its_TrollTime

a boolValue is not a physical object, it should not be affected by NetworkOwnership

BoolValues are physical objects but they aren’t affected by network ownership. Anything that isn’t a BasePart isn’t affected by network ownership.

Side note, a related exploit report (Members only iirc):

Part Spawning Exploit

EDIT: Modified the title to be more appropriate. Recently, my place has been exploited frequently and I am not sure how it begins, but there is speculation around the moderation and development community of said group that people are removing the meshes from their hats and dropping them. https://gyazo.com/8ecb1f59da4478407b93f9b62b7a98a0?token=80973833db19bf916b17e01804103c16 I’m not too sure how it works or if this is informative, but all I know is that someone is able to spam a load of p…

[its_DevelopTime]

really thanks, colbert.
…
Well, I think it’s a dangerous bug
it’s weird that roblox have not solved it yet

[notchloeno (chloe)]

Re-read your reply, but couldn’t find a previous report so am going to report it again. Lead Top Contributors can deny it if it has already been reported.

[its_DevelopTime]

I do not have permission to report errors
do it if you want

[DevOfLua (Luka)]

You need to make a Bulletin Board.

[colbert2677 (ImagineerColbert)]

It’d be more appropriate to link the post approval procedure so they know what to do and why. Linking the Bulletin Board category doesn’t do much in terms of explaining things.