- [Template power levels event for quick copy-pasting](#template-power-levels-event-for-quick-copy-pasting) - [Completeish event](#completeish-event) - [Reasonable version](#reasonable-version) - [Medium version](#medium-version) - [Paranoid version](#paranoid-version) # Template power levels event for quick copy-pasting The main point I do this for is users `users` ```json { "users": { "@Ciblia:matrix.org": 100, "@aminda:dendrite.matrix.org": 100, "@aminda:matrix.org": 100, "@aminda:mozilla.org": 100, "@aminda:pikaviestin.fi": 100, "@aminda:tedomum.net": 100, "@mikaela:tchncs.de": 100, "@mikaela-5756df8cc43b8c6019785660:gitter.im": 100, "@mkaysi:fedora.im": 100, "@mikaela.suomalainen:matrix.org": 100, "@mikaela.matterbridge:converser.eu": 100, "@mikaela.matterbridge:tedomum.net": 100, "@aminda:beeper.com": 100, "@aminda:masfloss.net": 100, "@aminda:envs.net": 100, "@leon:masfloss.net": 99, "@fidino:artemislena.eu": 99, "@mjolnir_3a78dd65-60a4-4c3a-9a60-01e214a5d6f6:draupnir.midnightthoughts.space": 99 } }, ``` ## Completeish event This has the rest event in two forms, but doesn't duplicate the above. Generic notes: - Don't have anything in `events {}` as `0` or otherwise users will be able to send state events with that name including gigabytes of data breaking the room. - Refer to security considerations of [MSC3779](https://github.com/matrix-org/matrix-spec-proposals/pull/3779). ### Reasonable version This is not the Element/Synapse default as that would be pointless to list. ```jsonnet { "ban": 50, "events": { "im.vector.modular.widgets": 50, "m.room.avatar": 50, "m.room.canonical_alias": 13, "m.room.encryption": 100, "m.room.history_visibility": 99, "m.room.join_rules": 50, "m.room.name": 50, "m.room.pinned_events": 25, "m.room.power_levels": 50, "m.room.retention": 100, "m.room.server_acl": 100, "m.room.tombstone": 100, "m.room.topic": 25, "m.space.child": 50, }, "events_default": 0, "historical": 100, "invite": 0, "kick": 25, "redact": 25, "state_default": 50, "users": { // READ THE BEGINNING OF THE FILE FOR THIS SECTION AND PROPER FORMAT! OR SEE YOUR CURRENT EVENT! }, "users_default": 0, } ``` - `m.room.history_visibility` is lowered to 99 as it's a less permanent action than many of the others. I am not sure on my initial logic, but it's documented in PPFI repo as PL100 vs PL99. - `m.room.power_levels` is set to `50` so moderators can raise others to moderators for example matrix-appservice-irc, which I would then give PL51 for ops syncing. On matrix side immune mods, could be PL52. - invite commonly defaults to `50`, but I haven't seen abuse through it - PL25, half-moderator is introduced (inspired from Ergo/IRC halfop), with powers to: change room topic, pinned messages, remove messages and kick users (but not ban). - Maybe this could be used e.g. in an association where a secretary/someone unwilling to be a full moderator wants to update room topic for next meeting time or update a version number? :shrug: Alternatively someone not wanting full moderator responsibility could remove spam while not participating in banning discussions. - PL13 gets access to change main alias and add/remove published room aliases alongside (at least on Synapse) [un/publish the room in the room directory](https://github.com/vector-im/element-web/issues/13835). - This can be used with e.g. [altalias maubot plugin](https://matrix.org/blog/2020/06/19/this-week-in-matrix-2020-06-19#alt-alias-maubot-plugin). I don't care about room directory or the main alias as it doesn't affect ctrl-k that much anyway, rooms are generally discovered through Spaces and I use Matrix URI scheme which takes room internal ID and servers to find it from instead of caring about the alias. Most importantly **don't give permissions to entirely untrusted users.** ### Medium version ```jsonnet { "ban": 50, "events": { "im.vector.modular.widgets": 50, "m.room.avatar": 50, "m.room.canonical_alias": 13, "m.room.encryption": 100, "m.room.history_visibility": 99, "m.room.join_rules": 50, "m.room.name": 50, "m.room.pinned_events": 25, "m.room.power_levels": 50, "m.room.retention": 100, "m.room.server_acl": 100, "m.room.tombstone": 100, "m.room.topic": 25, "m.space.child": 50, }, "events_default": 0, "historical": 100, "invite": 50, "kick": 25, "redact": 25, "state_default": 50, "users": { // READ THE BEGINNING OF THE FILE FOR THIS SECTION AND PROPER FORMAT! OR SEE YOUR CURRENT EVENT! }, "users_default": 0, } ``` - Otherwise "Reasonable version", but - Only moderators can invite ### Paranoid version ```jsonnet { "ban": 50, "events": { "im.vector.modular.widgets": 100, "m.room.avatar": 100, "m.room.canonical_alias": 100, "m.room.encryption": 100, "m.room.history_visibility": 100, "m.room.join_rules": 100, "m.room.name": 100, "m.room.pinned_events": 100, "m.room.power_levels": 100, "m.room.retention": 100, "m.room.server_acl": 100, "m.room.tombstone": 100, "m.room.topic": 100, "m.space.child": 100, }, "events_default": 0, "historical": 100, "invite": 100, "kick": 50, "redact": 50, "state_default": 100, "users": { // READ THE BEGINNING OF THE FILE FOR THIS SECTION AND PROPER FORMAT! OR SEE YOUR CURRENT EVENT! }, "users_default": 0, } ```