Config Defined Admin List #1246

New issue

Closed

opened 2025-12-27 04:55:08 +00:00 by Astralchroma · 0 comments

Astralchroma commented

2025-12-27 04:55:08 +00:00

Having the server administrator list be defined by those present in a specific room is problematic as:

The admin room may be broken, inaccessible, etc leaving an admin without access to commands, some of which may be needed to restore the room.
Given recent security vulnerabilities it is not out of the question that a user could "break into" the admin room, gaining the access that that entails, and potentially removing legitimate admins from the room.

These two problems can be avoided by having the admin list be defined by config in some way.

I propose the addition of two new config values.

"admins", which is a list of Matrix IDs; any account added to this list will be an admin, regardless of whether they are in the admin room or not.

"admins_from_room" which is a boolean; when true, those in the admin room are granted admin access in addition to the config defined list. When false only the admin list is used.

By default "admins_from_room" is enabled to preserve behavior that everyone has come to expect, and to avoid users getting locked out. However users should be advised to add themself to the admins list, and then disable this option due to the previously mentioned security concern.

Having the server administrator list be defined by those present in a specific room is problematic as: - The admin room may be broken, inaccessible, etc leaving an admin without access to commands, some of which may be needed to restore the room. - Given recent security vulnerabilities it is not out of the question that a user could "break into" the admin room, gaining the access that that entails, and potentially removing legitimate admins from the room. These two problems can be avoided by having the admin list be defined by config in some way. I propose the addition of *two* new config values. "admins", which is a list of Matrix IDs; any account added to this list will be an admin, regardless of whether they are in the admin room or not. "admins_from_room" which is a boolean; when true, those in the admin room are granted admin access *in addition to* the config defined list. When false only the admin list is used. By default "admins_from_room" is enabled to preserve behavior that everyone has come to expect, and to avoid users getting locked out. However users should be advised to add themself to the admins list, and then disable this option due to the previously mentioned security concern.