So, I'm remaking this report due to the rapid "WAI" the original received. Allow me to elaborate...

This issue in question is a direct concern for GRIEFING in worlds where players are, by default, set to the visitor permission level. When a player is set to visitor, it's set as a way for players to be unable to interact with anything in the world to avoid damage from trolls. While in Adventure mode it's possible to destroy paintings, minecarts, boats, etc, this is set as an intentional feature for map makers to have players be able to interact with those elements for puzzles, etc. Visitor permission settings are intended so that little Timmy doesn't destroy your house, set fire to your sheep, and blow up your diamond stash. With things as they are right now, there's nothing stopping a player from joining your world through Friends of Friends, or a player thinking it'd be funny to disable your farm, or even worse, a player actually wanting to destroy your hard work, removing a minecart from an automated redstone system, tearing down all of your paintings, stealing your boats, or breaking your armor stands, and tossing them into a lava pool.

To claim visitor permissions and adventure mode permissions are one in the same is not only wrong, it's irresponsible for the bug tracker team to claim, due to the potential for damage, no matter how miniscule it may seem. I enjoy having people join my world and visit, hang out, and chat while I work on my builds, but the worry that someone can just destroy my decorations, ruin my super smelter, or cause any level of damage causes me to constantly have to keep an eye on my friends...

Please, do not mark this as working as intended, then reference adventure mode specific bug reports that were closed ages ago. This should not be considered as working as intended. It's an oversight from how visitor mode was designed. If a player does not have permissions to harm mobs, destory blocks, open doors or chests, or interact with ANYTHING in the world, why should that same player still be able to break and move tile entities like paintings, minecarts, boats or armor stands?

Now...

Steps to reproduce:

• Create a survival world
• Place a painting, armor stand, boat or minecart
• Set your own permission level to "visitor"

• Note that ALL permissions are set to "off", implying that you should be unable to interact with the world in any way.

• Attack any of the above entities, they will break as if you had normal permissions

Observed Results:

• Players with visitor permission levels can destroy paintings, minecarts, armor stands, and boats without hinderance

Expected Results:

• Players should not be able to interact with the world in ANY way if set to visitor permission level as visitor permissions are intended to stop players from interacting with your world without your consent.