Bug: Deny guest channels does not work correctly

mniehren

Hi,

i don’t want, that guest can join into channels, where no regular user is joined.
So i do the following setting in kwmserverd.cfg
allow_guest_only_channels = no

Now, i got the following behaviour:
An regular user open’s the channel and joined in. After that guest1 can also
join in, correct. Now the user disconnects from the channel, guest1 is still
in the channel. He send’s the link to guest2 and guest2 can also join the
channel as it is still active. So external guests can do meetings over the
server, which should be denied.

So i think, on joining there should not only be an check for an active channel,
but also if an regular user is already joined into the channel.

best regards
Michael

longsleep

@mniehren

This is intentional. Running meetings (== at least one participant stays connected) are not interrupted.

Cheers
Simon

mniehren

@longsleep

Hi Simon, that’s right. And i find it ok, if i do an meet with a few guests, that
they can still talk, if i leave the meeting, but new guest, which i did’n know,
should not come into the meet on my server.

I see it from the security point. Guest users should not
be able to do meetings over my server where i am not involved.

best regards
Michael

longsleep

@mniehren said in Bug: Deny guest channels does not work correctly:

if i leave the meeting, but new guest, which i did’n know,
should not come into the meet on my server.

I understand that, but thats simply not how public rooms are designed. The reason for always allowing in guests into existing public rooms is that a previously connected guest might loose connections and try to reconnect with a new session. The idea is that we rather allow people to meet instead of introducing too many hurdles which could prevent just that.

A potential solution for this problem would be to add “locks” to rooms which is a feature request which we already consider to implement in a future Meet release.

Another feature request which would solve this issue would be rooms with a registered guest list.

mniehren

@longsleep

That’s all ok, if i set allow_guest_only_channels to yes.

Could it not be easily adapted in the check, whether the channel is
active, if a guest want to join in. If the check will be extended to look
for an registered user looged in, before it allows the guest to login ?