Todo #106
Allow privileged clients to send messages to any room
| Status : | Closed | Start : | 02/10/2009 | |
| Priority : | Normal | Due date : | ||
| Assigned to : | - | % Done : | 0% |
|
| Category : | Security | |||
| Target version : | Union 1.0 Beta 1 | |||
Description
Given the correct privileges, a client should be able to send messages to rooms it's not in.
Reasons to allow outside messages:
- a moderator broadcasts a system message to many rooms without first joining them
- inter-application communication (e.g., a player in one chess game sends an invite to all players in another game)
Reasons to prevent outside messages:
- developers might want to turn off "outside messaging" in order to prevent clients from interacting with rooms they're not in.
Security
Outside messaging needs to be restricted by Union's general security/privileges model. A client should not be able to sabotage an app or spoof operations by messaging a room without being in it.
History
05/12/2009 12:40 PM - colin moock
- Subject changed from Can a client send a message to a room it's not in? to Allow privileged clients to send messages to any room
01/19/2010 10:54 PM - colin moock
- Category changed from Messaging to Security
- Target version set to Union 1.0 Beta 2
Also available in: Atom