matrix-org / matrix-org/matrix-hookshot

Failed permissions-check for `infinity`-PL of owner in v12-room

Open
#1,369 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
450
Forks
95
Avg merge
1d 2h
Merged PRs (30d)
23

Description

Integration manager fails permissions-check for infinity-level of owner in v12-room.
Same for any concrete integration/bot, such as Feeds or Github.

Owner of a room v12 unable to control (setup, edit,..) integrations, but any owner in v12-room has infinity power-level.

  • integrations manager: scalar.vector.im
  • client: web or desktop, any client that supports integrations

Error:

You don’t have permission to add some extensions to the room
Ask a room admin to update your permissions or install an extension on your behalf.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the failure in the scalar.vector.im integrations manager using an owner in a v12 room, including concrete integrations such as __Feeds or Github. Start by tracing the integration permission check for the infinity power level across supported web or desktop clients. Done means the room owner can set up and edit integrations without the permission error.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
authorization
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.