wholetrans/docs-matrix-spec
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add a note that ACLs don't operate at the auth level; Fix glob definition

Browse source
This commit is contained in:
Travis Ralston 2018-08-27 16:13:42 -06:00
parent be2e0fc9d4
commit 82be6077ff
1 changed files with 7 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

9
event-schemas/schema/m.room.server_acl
View file

@ -22,6 +22,11 @@ description: |-
#. If the server name matches an entry in the ``allow`` list, allow. #. If the server name matches an entry in the ``allow`` list, allow.
#. Otherwise, deny. #. Otherwise, deny.
.. Note::
Server ACLs do not restrict the events relative to the room DAG via authorisation
rules, but instead act purely at the network layer to determine which servers are
allowed to connect and interact with a given room.
.. WARNING:: .. WARNING::
Failing to provide an ``allow`` rule of some kind will prevent **all** Failing to provide an ``allow`` rule of some kind will prevent **all**
servers from participating in the room, including the sender. This renders servers from participating in the room, including the sender. This renders
@ -51,7 +56,7 @@ properties:
description: |- description: |-
The server names to allow in the room, excluding any port information. The server names to allow in the room, excluding any port information.
Wildcards may be used to cover a wider range of hosts, where ``*`` Wildcards may be used to cover a wider range of hosts, where ``*``
matches zero or more characters and ``?`` matches one or more characters. matches zero or more characters and ``?`` matches exactly one character.
**This defaults to an empty list when not provided, effectively disallowing **This defaults to an empty list when not provided, effectively disallowing
every server.** every server.**
@ -62,7 +67,7 @@ properties:
description: |- description: |-
The server names to disallow in the room, excluding any port information. The server names to disallow in the room, excluding any port information.
Wildcards may be used to cover a wider range of hosts, where ``*`` Wildcards may be used to cover a wider range of hosts, where ``*``
matches zero or more characters and ``?`` matches one or more characters. matches zero or more characters and ``?`` matches exactly one character.
This defaults to an empty list when not provided. This defaults to an empty list when not provided.
items: items: