MSC2596: Proposal to always allow rescinding invites#2596
Conversation
Signed-off-by: Tulir Asokan <tulir@maunium.net>
Signed-off-by: Tulir Asokan <tulir@maunium.net>
Signed-off-by: Tulir Asokan <tulir@maunium.net>
| ## Proposal | ||
| The proposed fix is a modification to the authorization rules to always allow | ||
| rescinding invites that you sent. The modifications are applied on top of room | ||
| version 6. In section "5. If type is `m.room.member`" -> "d. If `membership` |
There was a problem hiding this comment.
it's a bit easier to reference this as "the m.room.member rules" as it's technically step 4 after applying all the diffs from the various room versions.
There was a problem hiding this comment.
I'm not sure I fully understand my 4 year old comment here, but a link to the spec itself would be appreciated.
| needed. Step `iii` is modified to add `invite` to the list of prohibited | ||
| previous membership states: | ||
|
|
||
| > iii. If *target user*'s current membership state is `invite`, `join` or `ban`, reject. |
There was a problem hiding this comment.
while this would fix one bug, it introduces another: not being able to accept invites from dead homeservers. Currently if you have an invite from a dead server it is possible to convince another user to invite you instead, which doesn't involve room moderators (typically) getting involved.
There was a problem hiding this comment.
MSC4125 should hopefully for the most part mitigate this issue.
| The vendor-prefixed room version `net.maunium.msc2596` can be used until the | ||
| proposal is assigned to a future official room version. |
There was a problem hiding this comment.
Presuming net.maunium.msc2596 is based upon room version 11, given this does not appear to be implemented currently.
There was a problem hiding this comment.
Doesn't seem to be the case (second sentence of "proposal" section):
The modifications are applied on top of room version 6.
Rendered
This would solve matrix-org/matrix-spec#172