gist/matrix/m.room.power_levels/README.md

<!-- START doctoc generated TOC please keep comment here to allow auto update -->
<!-- DON'T EDIT THIS SECTION, INSTEAD RE-RUN doctoc TO UPDATE -->

- [Template power levels event for quick copy-pasting](#template-power-levels-event-for-quick-copy-pasting)
  - [Completeish event](#completeish-event)
    - [Reasonable version](#reasonable-version)
    - [Medium version](#medium-version)
    - [Paranoid version](#paranoid-version)

<!-- END doctoc generated TOC please keep comment here to allow auto update -->

# Template power levels event for quick copy-pasting

The main point I do this for is users `users`

```json
{
	"users": {
		"@Ciblia:matrix.org": 100,
		"@aminda:dendrite.matrix.org": 100,
		"@aminda:matrix.org": 100,
		"@aminda:mozilla.org": 100,
		"@aminda:pikaviestin.fi": 100,
		"@aminda:tedomum.net": 100,
		"@mikaela:pirateriot.net": 100,
		"@mikaela:tchncs.de": 100,
		"@mikaela-5756df8cc43b8c6019785660:gitter.im": 100,
		"@mkaysi:fedora.im": 100,
		"@mikaela.suomalainen:matrix.org": 100,
		"@mikaela.matterbridge:converser.eu": 100,
		"@mikaela.matterbridge:tedomum.net": 100,
		"@aminda.matterbridge:jae.fi": 100,
		"@aminda:the-apothecary.club": 99,
		"@aminda:masfloss.net": 99,
		"@leon:the-apothecary.club": 99,
		"@leon:masfloss.net": 99,
		"@fidino:artemislena.eu": 99,
		"@aminda.git:pirateriot.net": 13
	}
},
```

## Completeish event

This has the rest event in two forms, but doesn't duplicate the above.

Generic notes:

- Don't have anything in `events {}` as `0` or otherwise users will be
  able to send state events with that name including gigabytes of
  data breaking the room.
  - Refer to security considerations of MSC 3779.

### Reasonable version

This is not the Element/Synapse default as that would be pointless to list.

```json5
{
  ban: 50,
  events: {
    "im.vector.modular.widgets": 50,
    "m.room.avatar": 50,
    "m.room.canonical_alias": 13,
    "m.room.encryption": 100,
    "m.room.history_visibility": 99,
    "m.room.join_rules": 50,
    "m.room.name": 50,
    "m.room.pinned_events": 25,
    "m.room.power_levels": 50,
    "m.room.retention": 100,
    "m.room.server_acl": 100,
    "m.room.tombstone": 100,
    "m.room.topic": 25,
    "m.space.child": 50,
  },
  events_default: 0,
  historical: 100,
  invite: 0,
  kick: 25,
  redact: 25,
  state_default: 50,
  users: {
    // READ THE BEGINNING OF THE FILE FOR THIS SECTION AND PROPER FORMAT! OR SEE YOUR CURRENT EVENT!
  },
  users_default: 0,
}
```

- `m.room.history_visibility` is lowered to 99 as it's a less permanent action than
  many of the others. I am not sure on my initial logic, but it's documented in
  PPFI repo as PL100 vs PL99.
- `m.room.power_levels` is set to `50` so moderators can raise others to moderators
  for example matrix-appservice-irc, which I would then give PL51 for ops syncing.
  On matrix side immune mods, could be PL52.
- invite commonly defaults to `50`, but I haven't seen abuse through it
- PL25, half-moderator is introduced (inspired from Ergo/IRC halfop), with powers to:
  change room topic, pinned messages, remove messages and kick users (but not ban).
  - Maybe this could be used e.g. in an association where a secretary/someone
    unwilling to be a full moderator wants to update room topic for next
    meeting time or update a version number? :shrug:
    Alternatively someone not wanting full moderator responsibility could remove
    spam while not participating in banning discussions.
- PL13 gets access to change main alias and add/remove published room aliases alongside
  (at least on Synapse) [un/publish the room in the room directory](https://github.com/vector-im/element-web/issues/13835).
  - This can be used with e.g. [altalias maubot plugin](https://matrix.org/blog/2020/06/19/this-week-in-matrix-2020-06-19#alt-alias-maubot-plugin).
    I don't care about room directory or the main alias as it doesn't affect ctrl-k that much anyway,
    rooms are generally discovered through Spaces and I use Matrix URI scheme
    which takes room internal ID and servers to find it from instead of caring about
    the alias. Most importantly **don't give permissions to entirely untrusted users.**

### Medium version

```json5
{
  ban: 50,
  events: {
    "im.vector.modular.widgets": 50,
    "m.room.avatar": 50,
    "m.room.canonical_alias": 13,
    "m.room.encryption": 100,
    "m.room.history_visibility": 99,
    "m.room.join_rules": 50,
    "m.room.name": 50,
    "m.room.pinned_events": 25,
    "m.room.power_levels": 50,
    "m.room.retention": 100,
    "m.room.server_acl": 100,
    "m.room.tombstone": 100,
    "m.room.topic": 25,
    "m.space.child": 50,
  },
  events_default: 0,
  historical: 100,
  invite: 50,
  kick: 25,
  redact: 25,
  state_default: 50,
  users: {
    // READ THE BEGINNING OF THE FILE FOR THIS SECTION AND PROPER FORMAT! OR SEE YOUR CURRENT EVENT!
  },
  users_default: 0,
}
```

- Otherwise "Reasonable version", but
- Only moderators can invite

### Paranoid version

```json5
{
  ban: 50,
  events: {
    "im.vector.modular.widgets": 100,
    "m.room.avatar": 100,
    "m.room.canonical_alias": 100,
    "m.room.encryption": 100,
    "m.room.history_visibility": 100,
    "m.room.join_rules": 100,
    "m.room.name": 100,
    "m.room.pinned_events": 100,
    "m.room.power_levels": 100,
    "m.room.retention": 100,
    "m.room.server_acl": 100,
    "m.room.tombstone": 100,
    "m.room.topic": 100,
    "m.space.child": 100,
  },
  events_default: 0,
  historical: 100,
  invite: 100,
  kick: 50,
  redact: 50,
  state_default: 100,
  users: {
    // READ THE BEGINNING OF THE FILE FOR THIS SECTION AND PROPER FORMAT! OR SEE YOUR CURRENT EVENT!
  },
  users_default: 0,
}
```