# Separate inventory inspection from staff restore permissions

Support staff may need to confirm a loss report without being able to give items or move a player. InventoryRollbackPlus provides separate permissions for viewing backups, restoring and related actions. Test those boundaries with a limited account instead of granting the plugin's full administrative scope.

## Record the starting point

Read the installed release's permissions and decide which staff role may inspect, restore or teleport. Save the current permission assignments. Use a test player record and a staff test account that does not have operator status or a wildcard permission.

## Work through the change

1. Grant the documented inspection permission, `inventoryrollbackplus.viewbackups`, to the intended support role. Keep restore and teleport permissions absent unless the role genuinely needs them.
2. Open a test player's backup list using the documented interface. Confirm the staff account can inspect the relevant timestamp and contents.
3. Attempt a restoration action and verify it is denied for the inspection role. Check the separate restore and restore.teleport permissions in the maintainer documentation when configuring the recovery role.
4. Repeat the test after reconnecting and inspect inherited groups. A broad parent-group permission can override an apparently narrow assignment.

## Check the result

The inspection account should see the intended records and remain unable to apply recovery actions. The authorised recovery role should pass a separate controlled test. Keep the final permission mapping with staff procedures so an urgent incident does not encourage an improvised wildcard grant.

## If the result differs

If a supposedly limited account can restore, check operator status, inherited groups and wildcard permissions before changing the plugin. If it cannot inspect, confirm the exact permission spelling and context. A hidden button alone is not enough evidence that the action is protected.

Remove trial grants and restore the previous staff assignment if the boundary cannot be demonstrated. Keep player records untouched during permission testing. If a test restoration was accidentally applied, use the pre-test checkpoint and record the correction.

## References and related help

- [InventoryRollbackPlus maintainer reference 1](https://github.com/TechnicallyCoded/Inventory-Rollback-Plus)
- [Restore a recorded player inventory with InventoryRollbackPlus](https://help.cloudexa-hosting.com/books/minecraft-plugins/page/restore-a-recorded-player-inventory-with-inventoryrollbackplus)
- [Create Minecraft ranks and inheritance with LuckPerms](https://help.cloudexa-hosting.com/books/game-hosting/page/create-minecraft-ranks-and-inheritance-with-luckperms)