matrix-org / mjolnir

A moderation tool for Matrix
Apache License 2.0
310 stars 54 forks source link

Access around Mjolnir owners doesn't match up with communities. #420

Open Gnuxie opened 1 year ago

Gnuxie commented 1 year ago

Access to a particular mjolnir (whether that mjolnir is still run) is managed by the owner. If we remove an owner's access to a mjolnir, we also end up closing out anyone else in that mjolnir's management room from using the mjolnir.

What I mean is that we can have the following:

1.User A is in good standing.

  1. User A creates a Mjölnir.
  2. User A steps down, letting user B be the de facto owner of this Mjölnir.
  3. User A becomes an obnoxious troll and gets kicked out from the server.
  4. We remove A's authorization to generate Mjölniren (I think I'm going to keep that plural :) ).
  5. Any Mjölnir of A gets closed.
  6. B loses a Mjölnir. The only reason I can think of for indexing Mjölniren by creator is to do 6, no?
Gnuxie commented 1 year ago

https://github.com/matrix-org/mjolnir/pull/364/files#r1015289241