RocketChat / Rocket.Chat

The communications platform that puts data protection first.
https://rocket.chat/
Other
40.09k stars 10.35k forks source link

Feature Request - Prevent convert private group/channel - public channel #9360

Closed ledainam closed 6 years ago

ledainam commented 6 years ago

Server Setup Information:

Steps to Reproduce:

  1. Created private channel

  2. Admin user converted private channel to public channel. Other users can join without permission from channel creator

Expected behavior:

No one can convert from private channel to public channel except channel creator to protect personal privacy.

Actual behavior:

Admin user can convert from room list without permission from channel creator.

TwizzyDizzy commented 6 years ago

@rocket-cat close

Hi @ledainam

to be honest: admin is king. There's no debate about that. One might discuss whether this needs to be a UI option, but in the end the admin could do anything in MongoDB anyway, so I guess there is no way to prevent an admin from doing this. And I think there shouldn't be.

Unless you specifically encrypt message content in the database with user-supplied keys, there is no way to prevent an admin from intruding your privacy. Well.. hold on. OTR-Chat of course but there are also some current issues with that.

I am therefore closing this issue. If you don't agree, please reply and tell us why my argument is wrong. :)

Cheers Thomas