From 40daaa883b5f513fcb4d690f1d6a9d9572d35f2a Mon Sep 17 00:00:00 2001 From: Matthew Wild Date: Tue, 9 Nov 2021 12:01:59 +0000 Subject: [PATCH] prosody: Disable user invitations for restricted users Note that this currently has no effect, because user and contact invitations are disabled globally for non-admins. --- ansible/files/prosody.cfg.lua | 3 +++ 1 file changed, 3 insertions(+) diff --git a/ansible/files/prosody.cfg.lua b/ansible/files/prosody.cfg.lua index c587ead..ce8c090 100644 --- a/ansible/files/prosody.cfg.lua +++ b/ansible/files/prosody.cfg.lua @@ -141,6 +141,9 @@ registration_invite_only = true -- over what happens when a user invites someone. allow_contact_invites = false +-- Disallow restricted users to create invitations to the server +deny_user_invites_by_roles = { "prosody:restricted" } + invites_page = ENV_SNIKKET_INVITE_URL or ("https://"..DOMAIN.."/invite/{invite.token}/"); invites_page_external = true