On Mon, Feb 18, 2019 at 05:23:05PM -0500, doctormo@...400... wrote:
I just thought of something.
If we have a few years of using chat.inkscape.org
with people jumping
in every now and then to ask questions, and then someone joins and
types `@all hello here's some spam!`
We'd be emailing all the people who ever joined the chat and didn't
leave the room (which I figure would be everyone)
Is there a way to turn off the @all functionality for #general and
#inkscape-devel (except maybe for the admin?)
The permissions page allows specifying which roles are allowed to
do "Mention All [mention-all]". Currently it is permitted for admin,
moderator, owner, and user. It is not allowed for leader, guest,
or anonymous. It looks like this would apply to all rooms, not settable
on a per-room basis.
I agree it is a spam vulnerability since we don't limit who can
register. How about I remove it for the user role?