Filip/matrix-spec
1
0
Fork 0
mirror of https://github.com/matrix-org/matrix-spec synced 2026-01-29 10:33:43 +01:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Merge pull request #2183 from lucavb/master

Browse source 
Spec clarification regarding authorisation rules in v1
This commit is contained in:
Travis Ralston 2019-07-23 12:04:27 -06:00 committed by GitHub
parent 7b0f5ea77b f4d6b6c261
commit bf9f2cd1b6
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 18 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
specification/rooms/v1.rst
View file

@ -109,6 +109,12 @@ The types of state events that affect authorization are:
- ``m.room.power_levels`` - ``m.room.power_levels``
- ``m.room.third_party_invite`` - ``m.room.third_party_invite``
.. NOTE::
Power levels are inferred from defaults when not explicitly supplied.
For example, mentions of the ``sender``'s power level can also refer
to the default power level for users in the room.
The rules are as follows: The rules are as follows:
1. If type is ``m.room.create``: 1. If type is ``m.room.create``:
@ -243,15 +249,24 @@ The rules are as follows:
#. If there is no previous ``m.room.power_levels`` event in the room, allow. #. If there is no previous ``m.room.power_levels`` event in the room, allow.
#. For each of the keys ``users_default``, ``events_default``, #. For the keys ``users_default``, ``events_default``,
``state_default``, ``ban``, ``redact``, ``kick``, ``invite``, as well as ``state_default``, ``ban``, ``redact``, ``kick``, ``invite`` check if they
each entry being changed under the ``events`` or ``users`` keys: were added, changed or removed. For each found alteration:
i. If the current value is higher than the ``sender``'s current power level, i. If the current value is higher than the ``sender``'s current power level,
reject. reject.
#. If the new value is higher than the ``sender``'s current power level, #. If the new value is higher than the ``sender``'s current power level,
reject. reject.
#. For each entry being added, changed or removed in both the ``events`` and
``users`` keys:
i. If the current value is higher than the ``sender``'s current power level,
reject.
#. If the new value is higher than the ``sender``'s current power level,
reject.
#. For each entry being changed under the ``users`` key, other than the #. For each entry being changed under the ``users`` key, other than the
``sender``'s own entry: ``sender``'s own entry: