Rocket.Chat icon indicating copy to clipboard operation
Rocket.Chat copied to clipboard

[NEW] Permissions setting to deny low-privilege users access to the user autocomplete list

Open alankessler opened this issue 7 years ago • 6 comments

@RocketChat/core

Right now there is no way to hide the user list from low-permission users. This should allow the administrator to disable the autocomplete feature.

alankessler avatar Apr 25 '17 22:04 alankessler

What happens to the user list on the side panel?

graywolf336 avatar Apr 25 '17 22:04 graywolf336

@graywolf336 Probably what you expected. The guest user appears online, but all other users in the channel appear offline to the guest.

image image

alankessler avatar Apr 25 '17 23:04 alankessler

But it does fix the problem I'm concerned about:

as guest: image

as admin:

image

alankessler avatar Apr 25 '17 23:04 alankessler

I wonder why was this never merged?

@alankessler do you mind fixing the conflicts on the PR?

Hudell avatar Nov 07 '18 13:11 Hudell

I wonder why was this never merged?

@alankessler do you mind fixing the conflicts on the PR?

I think this is fixed.

alankessler avatar Nov 08 '18 18:11 alankessler

We are still missing a permission to list the members of rooms, I think we should add this new permission.

rodrigok avatar May 28 '20 19:05 rodrigok

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

:white_check_mark: alankessler
:x: Alan Kessler


Alan Kessler seems not to be a GitHub user. You need a GitHub account to be able to sign the CLA. If you have already a GitHub account, please add the email address used for this commit to your account.
You have signed the CLA already but the status is still pending? Let us recheck it.

CLAassistant avatar Jun 13 '23 21:06 CLAassistant