Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Enforce MSC2209: auth rules for notifications in power level event #7502

Merged
merged 4 commits into from
May 14, 2020

Conversation

clokep
Copy link
Member

@clokep clokep commented May 14, 2020

Fixes #7501

This adds a new flag to RoomVersion to specify when to enforce the additional rules on power level events, it then implements the logic to enforce this. Includes a basic test.

@clokep clokep force-pushed the clokep/notif-auth-rules branch from f02ea48 to 466fff9 Compare May 14, 2020 14:46
@clokep clokep requested a review from a team May 14, 2020 15:14
Copy link
Member

@richvdh richvdh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm other than bikeshedding over the var name

synapse/api/room_versions.py Outdated Show resolved Hide resolved
@clokep clokep merged commit fef3ff5 into develop May 14, 2020
@clokep clokep deleted the clokep/notif-auth-rules branch May 14, 2020 16:38
phil-flex pushed a commit to phil-flex/synapse that referenced this pull request Jun 16, 2020
…atrix-org#7502)

In a new room version, the "notifications" key of power level events are
subject to restricted auth rules.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants