Open hialvaro opened 2 weeks ago
Heya, I'm actually surprised that this is the first time this issue has come up - because I see this all the time when testing, and the websocket code has always worked like this.
The fundamental problem is actually that all websocket messages are sent to all clients - this is actually quite challenging to fix, as we need to track which browser window really should receive which messages.
I assume, as per what you state, that this does not respect ACLs at all? So all users would see the command output for any job?
When using OliveTin with multiple users (from different ACL groups even), when a user triggers an action, when the action finishes it opens the result modal for everyone. Here's the flow:
user A
run any action that opens an output modaluser B
anduser A
showing the result