domjudge icon indicating copy to clipboard operation
domjudge copied to clipboard

Remove role restriction from event feed reading

Open meisterT opened this issue 6 years ago • 1 comments

In theory, we should everyone allow to read the event feed. However, before we can allow that we have to solve two issues:

a) make sure that we don't leak information that's not available through other channels to the teams or the public (e.g. number of test cases per problem), and b) make sure that we cannot be DOSed easily by opening a handful of event-feed connections (which do not have a timeout).

For now, I'll restrict it to the jury again.

meisterT avatar Sep 03 '18 20:09 meisterT

In our current implementation of the new scoreboard we give out the event ID of the latest event, regardless of whether you have access to it. This should also be fixed.

nickygerritsen avatar Dec 03 '18 22:12 nickygerritsen

Should we actually do this, in which cases would this be useful as I think the code will be harder to maintain even besides the issues @meisterT mentioned IMO.

vmcj avatar Nov 04 '22 21:11 vmcj

We decided that if you actually want more people to read the event feed (with different permission/access levels), you should put a CDS in front of it, see https://tools.icpc.global/.

meisterT avatar Nov 10 '22 08:11 meisterT