Thanks a lot for clarification
Sounds like there nothing to fix :)

On Jul 19, 9:21 pm, "[email protected]" <[email protected]>
wrote:
> Hi,
>
> actually there is no security issue, its a matter of room configuration.
> You have the *isModerated* Flag for each room.
>
> You can either configure that the user that enters the room first is
> moderator (mean isModerated = false) or that only Moderators/Administrators
> [/Room-Moderators .. don't know if that feature is fully in trunk] do get
> the Moderation Flag (means isModerated = true).
>
> If the user comes via email invitation or not does not really matter. I
> think if you organize an event via the calendar the problem is also that the
> one that has organized the event receives the same email like everybody. If
> you forbid those users that enter the room via link of invitation emails to
> become moderator by default, you would result in having no chance for a
> simple user to become moderator at all (or he always needs to login into
> OpenMeetings and enter the room via the Rooms-Section ... which is not that
> handy I think)
>
> So if you want to fix this issue you really need to think about the
> scenarios, just locking out users from becoming moderation-flag is
> definitely no solution.
>
> Sebastian
>
> 2011/7/19 solomax <[email protected]>
>
>
>
>
>
>
>
>
>
> > Hello Lucimara, Sebastian
>
> > According to my observation the first user entering the room gain full
> > rights on that room.
> > Was tested on demo.openmeetings.de/openmeetings.
>
> > 1) I send invitation to one of my addresses
> > 2) Logout from openmeetings
> > 3) Enter the room using invitation link
>
> > The user has all right in the room.
>
> > If guess enters the room while owner in it he/she has no rights.
> > I'll try to fix it ASAP because I think it is security issue.
>
> > On Jul 17, 4:33 pm, Sebastian Wagner <[email protected]> wrote:
> > > Hi Lucimara,
>
> > > I don't think you have the chance to make an user that is invited via
> > email
> > > to be moderator.
> > > The initial setup is that the user that sets the room up, access the room
> > > via OpenMeetings. Either through Rooms > My Rooms or via the button in
> > the
> > > calendar. I think if the user enters the room like that he should be
> > > automatically the moderator.
>
> > > Sebastian
>
> > --
> > You received this message because you are subscribed to the Google Groups
> > "OpenMeetings User" group.
> > To post to this group, send email to [email protected].
> > To unsubscribe from this group, send email to
> > [email protected].
> > For more options, visit this group at
> >http://groups.google.com/group/openmeetings-user?hl=en.
>
> --
> Sebastian 
> Wagnerhttp://www.webbase-design.dehttp://openmeetings.googlecode.comhttp://www.wagner-sebastian.com
> [email protected]

-- 
You received this message because you are subscribed to the Google Groups 
"OpenMeetings User" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/openmeetings-user?hl=en.

Reply via email to