You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I would like the reminder bot to be able to remind the whole room of something.
Actually, this is currently possible using a "power level reflection attack" ;): If the bot has sufficient power, a user can schedule a reminder containinig @room, and the bot will wake up the room. This is a simple method, but can be abused.
A simple solution would be to:
When scheduling a reminder, check for @room in the reminder text
If it contains @room, check the power level of the bot on whether it may trigger room notifications
If it can, compare the power level of the sending user
If they can send room notifications, schedule the reminder; if not, error out and/or remove the @room from the reminder
That still carries the issue that it will notifiy all room mebers three times: on creating the reminder, on confirming the reminder, and on sending the reminder. I would thus prefer to have a new subcommand to trigger room reminders, so the original reminder command does not have to contain @room.
Thoughts please; I will implement this if the maintainers are positive enough that they want it and the open decisions have been decided.
The text was updated successfully, but these errors were encountered:
I think this is a great idea. I've just started using this bot and quickly wanted a way of reminding specific users or a whole room without each user clicking the thumbs up button. My initial thought for the user end of this is.
!remind <users> <date> <message>
!remind @user1 @user2 1 hour submit the new PR.
Testing the @room functionality the bot only notifies the whole room twice. Once while creating the reminder and again once its triggered. I think that's the correct way of doing it. The power level stuff should get worked out though. For larger rooms this could be a huge problem.
I would like the reminder bot to be able to remind the whole room of something.
Actually, this is currently possible using a "power level reflection attack" ;): If the bot has sufficient power, a user can schedule a reminder containinig
@room
, and the bot will wake up the room. This is a simple method, but can be abused.A simple solution would be to:
@room
in the reminder text@room
, check the power level of the bot on whether it may trigger room notifications@room
from the reminderThat still carries the issue that it will notifiy all room mebers three times: on creating the reminder, on confirming the reminder, and on sending the reminder. I would thus prefer to have a new subcommand to trigger room reminders, so the original reminder command does not have to contain
@room
.Thoughts please; I will implement this if the maintainers are positive enough that they want it and the open decisions have been decided.
The text was updated successfully, but these errors were encountered: