Hi,

actually there is no security issue, its a matter of room configuration.
You have the *isModerated* Flag for each room.

You can either configure that the user that enters the room first is
moderator (mean isModerated = false) or that only Moderators/Administrators
[/Room-Moderators .. don't know if that feature is fully in trunk] do get
the Moderation Flag (means isModerated = true).

If the user comes via email invitation or not does not really matter. I
think if you organize an event via the calendar the problem is also that the
one that has organized the event receives the same email like everybody. If
you forbid those users that enter the room via link of invitation emails to
become moderator by default, you would result in having no chance for a
simple user to become moderator at all (or he always needs to login into
OpenMeetings and enter the room via the Rooms-Section ... which is not that
handy I think)

So if you want to fix this issue you really need to think about the
scenarios, just locking out users from becoming moderation-flag is
definitely no solution.

Sebastian

2011/7/19 solomax <[email protected]>

> Hello Lucimara, Sebastian
>
> According to my observation the first user entering the room gain full
> rights on that room.
> Was tested on demo.openmeetings.de/openmeetings.
>
> 1) I send invitation to one of my addresses
> 2) Logout from openmeetings
> 3) Enter the room using invitation link
>
> The user has all right in the room.
>
> If guess enters the room while owner in it he/she has no rights.
> I'll try to fix it ASAP because I think it is security issue.
>
> On Jul 17, 4:33 pm, Sebastian Wagner <[email protected]> wrote:
> > Hi Lucimara,
> >
> > I don't think you have the chance to make an user that is invited via
> email
> > to be moderator.
> > The initial setup is that the user that sets the room up, access the room
> > via OpenMeetings. Either through Rooms > My Rooms or via the button in
> the
> > calendar. I think if the user enters the room like that he should be
> > automatically the moderator.
> >
> > Sebastian
>
> --
> You received this message because you are subscribed to the Google Groups
> "OpenMeetings User" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected].
> For more options, visit this group at
> http://groups.google.com/group/openmeetings-user?hl=en.
>
>


-- 
Sebastian Wagner
http://www.webbase-design.de
http://openmeetings.googlecode.com
http://www.wagner-sebastian.com
[email protected]

-- 
You received this message because you are subscribed to the Google Groups 
"OpenMeetings User" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/openmeetings-user?hl=en.

Reply via email to