Grant McLean 5c24d7b9eb Check required power levels earlier in createRoom handler. (#15695) ... * Check required power levels earlier in createRoom handler. - If a server was configured to reject the creation of rooms with E2EE enabled (by specifying an unattainably high power level for "m.room.encryption" in default_power_level_content_override), the 403 error was not being triggered until after the room was created and before the "m.room.power_levels" was sent. This allowed a user to access the partially-configured room and complete the setup of E2EE and power levels manually. - This change causes the power level overrides to be checked earlier and the request to be rejected before the user gains access to the room. - A new `_validate_room_config` method is added to contain checks that should be run before a room is created. - The new test case confirms that a user request is rejected by the new validation method. Signed-off-by: Grant McLean <grant@catalyst.net.nz> * Add a changelog file. * Formatting fix for black. * Remove unneeded line from test. --------- Signed-off-by: Grant McLean <grant@catalyst.net.nz>		2023-06-07 16:21:25 +01:00
..
ui_auth	Use mypy 1.0 (#15052)	2023-02-16 16:09:11 +00:00
__init__.py	Remove redundant "coding: utf-8" lines (#9786)	2021-04-14 15:34:27 +01:00
account_data.py	Experimental MSC3890 Implementation: Fix deleting account data when using an account data writer worker (#14869)	2023-03-03 10:51:57 +00:00
account_validity.py	N + 3: Read from column full_user_id rather than user_id of tables profiles and user_filters (#15649)	2023-06-02 17:24:13 -07:00
account.py	Optionally include account validity in MSC3720 account status responses (#12266)	2022-03-24 11:19:41 +01:00
admin.py	N + 3: Read from column full_user_id rather than user_id of tables profiles and user_filters (#15649)	2023-06-02 17:24:13 -07:00
appservice.py	Add support for claiming multiple OTKs at once. (#15468)	2023-04-27 12:57:46 -04:00
auth.py	N + 3: Read from column full_user_id rather than user_id of tables profiles and user_filters (#15649)	2023-06-02 17:24:13 -07:00
cas.py	Fix twisted trunk mypy errors (#14012)	2022-10-03 13:26:49 +00:00
deactivate_account.py	N + 3: Read from column full_user_id rather than user_id of tables profiles and user_filters (#15649)	2023-06-02 17:24:13 -07:00
device.py	Check appservices for devices during a /user/devices query. (#15539)	2023-05-05 15:18:47 -04:00
devicemessage.py	Remove legacy code of single user device resync api (#15418)	2023-04-21 12:06:39 +01:00
directory.py	Move ThirdPartyEventRules into module_api/callbacks (#15535)	2023-05-04 14:18:22 +00:00
e2e_keys.py	Add requesting user id parameter to key claim methods in TransportLayerClient (#15663)	2023-05-24 13:23:26 -07:00
e2e_room_keys.py	Bump black from 22.12.0 to 23.1.0 (#15103)	2023-02-22 15:29:09 -05:00
event_auth.py	Factor out an is_mine_server_name method (#15542)	2023-05-05 15:06:22 +01:00
events.py	Make EventHandler.get_event return None when the requested event is not found (#15298)	2023-03-21 13:23:47 +00:00
federation_event.py	Process previously failed backfill events in the background (#15585)	2023-05-24 23:22:24 -05:00
federation.py	Some house keeping on maybe_backfill() functions (#15709)	2023-06-05 23:38:52 -05:00
identity.py	Rename blacklist/whitelist internally. (#15620)	2023-05-19 12:25:25 +00:00
initial_sync.py	Pass the requester during event serialization. (#15174)	2023-03-06 16:08:39 +00:00
jwt.py	Consolidate logic to check for deactivated users. (#15634)	2023-05-23 10:35:43 -04:00
message.py	Move ThirdPartyEventRules into module_api/callbacks (#15535)	2023-05-04 14:18:22 +00:00
oidc.py	Add stricter mypy options (#15694)	2023-05-31 07:18:29 -04:00
pagination.py	Add stricter mypy options (#15694)	2023-05-31 07:18:29 -04:00
password_policy.py	Use direct references for some configuration variables (part 3) (#10885)	2021-09-23 07:13:34 -04:00
presence.py	Remove some unused server_name fields (#15723)	2023-06-06 12:32:29 +01:00
profile.py	N + 3: Read from column full_user_id rather than user_id of tables profiles and user_filters (#15649)	2023-06-02 17:24:13 -07:00
push_rules.py	Error if attempting to set m.push_rules account data, per MSC4010. (#15555)	2023-05-09 10:34:10 -04:00
read_marker.py	Remove some unused server_name fields (#15723)	2023-06-06 12:32:29 +01:00
receipts.py	Return read-only collections from @cached methods (#13755)	2023-02-10 23:29:00 +00:00
register.py	N + 3: Read from column full_user_id rather than user_id of tables profiles and user_filters (#15649)	2023-06-02 17:24:13 -07:00
relations.py	Add a catch-all * to the supported relation types when redacting (#15705)	2023-06-02 13:13:50 +00:00
room_batch.py	Batch up storing state groups when creating new room (#14918)	2023-02-24 13:15:29 -08:00
room_list.py	Use stable prefixes for MSC3827: filtering of /publicRooms by room type (#13370)	2022-07-27 19:46:57 +01:00
room_member_worker.py	Add config option to forget rooms automatically when users leave them (#15224)	2023-05-03 12:27:33 +01:00
room_member.py	Move ThirdPartyEventRules into module_api/callbacks (#15535)	2023-05-04 14:18:22 +00:00
room_summary.py	Tweak comment on _is_local_room_accessible as part of room visibility in /hierarchy to clarify the condition for a room being visible. (#14834)	2023-02-13 16:30:58 +00:00
room.py	Check required power levels earlier in createRoom handler. (#15695)	2023-06-07 16:21:25 +01:00
saml.py	Remove redundant types from comments. (#14412)	2022-11-16 15:25:24 +00:00
search.py	Pass the requester during event serialization. (#15174)	2023-03-06 16:08:39 +00:00
send_email.py	Discourage automatic replies to Synapse's emails (#13957)	2022-09-30 13:23:37 +00:00
set_password.py	Add a type hint for get_device_handler() and fix incorrect types. (#14055)	2022-11-22 14:08:04 -05:00
sso.py	Rename blacklist/whitelist internally. (#15620)	2023-05-19 12:25:25 +00:00
state_deltas.py	Remove HomeServer.get_datastore() (#12031)	2022-02-23 11:04:02 +00:00
stats.py	Remove some unused server_name fields (#15723)	2023-06-06 12:32:29 +01:00
sync.py	Error if attempting to set m.push_rules account data, per MSC4010. (#15555)	2023-05-09 10:34:10 -04:00
typing.py	Factor out an is_mine_server_name method (#15542)	2023-05-05 15:06:22 +01:00
user_directory.py	Move Spam Checker callbacks to a dedicated file (#15453)	2023-04-18 00:57:40 +00:00