Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for sending server ACLs #1560

Open
turt2live opened this issue Jul 24, 2018 · 3 comments
Open

Support for sending server ACLs #1560

turt2live opened this issue Jul 24, 2018 · 3 comments

Comments

@turt2live
Copy link
Member

turt2live commented Jul 24, 2018

The other half of element-hq/element-web#6987

Currently people have to use devtools or outside scripts to send ACL events. Would be nice to have a way to send the ACLs from within Riot, hopefully reducing mistakes in sending the event. The most common mistake so far seems to be forgetting to include an allow rule.

This probably doesn't have to be a prominent "ban server" button, and can probably be done through commands:

  • /allow-server *.matrix.org example.org - Adds *.matrix.org and example.org to the ACL
  • /block-server *.matrix.org example.org - Adds *.matrix.org and example.org to the ACL, ensuring the allow rules still permit access to the room

Possibly the commands should also calculate the new rules and require confirmation via a dialog? This could be a diff of some kind, maybe showing which users would be affected. Could also put a little warning triangle on servers in the room that won't respect the ACL. The rules could also be squashed where possible to ensure that they are as simple as possible (ie: *.matrix.org collapses test.matrix.org and test2.matrix.org if they already exist).

Another possible solution is to just have a /server-acls command that brings up a dialog with checkboxes to blacklist/whitelist servers. This would also allow someone to see what they're doing in realtime. Same sort of warning triangles for old servers would be nice, as well as the affected users.

@lampholder
Copy link
Member

I don't know much about this yet, but it sounds like a good idea to me.

@Mikaela
Copy link

Mikaela commented Nov 22, 2020

Has there been any recent activity regarding supporting ACL editing without /devtools? I think it has become increasingly common activity and the devtools is dangerous. I just failed at using it (possibly due to ambiguous translation) and view this as a better solution anyway.

On the original comment, I would suggest /blocklist-server instead to avoid the black is negative connotation.

@turt2live
Copy link
Member Author

https://github.com/matrix-org/mjolnir is the current recommended solution.

@t3chguy t3chguy transferred this issue from element-hq/element-web May 11, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants