All uploaded entities are grabbable by default. I thought, this was just for the owner of the entities, or maybe for everyone, when permissions are set in the server properties. Today I had a guy on my domain, an he was able to grab all not locked entities and mixed them nice up… (Server settings are only set for anonymus, friends and locked-in to visit the domain, not more).
To avoid this, does it mean I need to lock always all entities (what is a pain, if you work on the domain), or maybe, this is just a bug and should not happen? How I can block other People to push stuff on the domain, without always to lock everthing?