spec/scansion/muc_whois_anyone_member.scs
author Kim Alvefur <zash@zash.se>
Thu, 22 Jul 2021 17:18:39 +0200
branch0.11
changeset 11716 d117b92fd8e4
parent 9624 ddcb28c8f64b
permissions -rw-r--r--
MUC: Fix logic for access to affiliation lists Fixes https://prosody.im/security/advisory_20210722/ Backs out 4d7b925652d9
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
     1
# MUC: Allow members to fetch the affiliation lists in open non-anonymous rooms
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
     2
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
     3
[Client] Romeo
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
     4
	jid: 4e2pm7er@localhost
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
     5
	password: password
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
     6
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
     7
[Client] Juliet
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
     8
	jid: qnjm5253@localhost
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
     9
	password: password
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    10
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    11
[Client] Random
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    12
	jid: iqizbcus@localhost
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    13
	password: password
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    14
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    15
-----
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    16
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    17
Romeo connects
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    18
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    19
Juliet connects
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    20
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    21
Random connects
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    22
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    23
# Romeo joins and creates the MUC
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    24
Romeo sends:
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    25
	<presence to="mcgczevx@conference.localhost/Romeo">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    26
		<x xmlns="http://jabber.org/protocol/muc"/>
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    27
	</presence>
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    28
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    29
Romeo receives:
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    30
	<presence from="mcgczevx@conference.localhost/Romeo">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    31
		<x xmlns="http://jabber.org/protocol/muc#user" scansion:strict="false">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    32
			<item affiliation="owner" jid="${Romeo's full JID}" role="moderator"/>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    33
			<status code="110"/>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    34
			<status code="201"/>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    35
		</x>
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    36
	</presence>
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    37
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    38
Romeo receives:
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    39
	<message from="mcgczevx@conference.localhost" type="groupchat">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    40
		<subject/>
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    41
	</message>
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    42
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    43
# and configures it for private chat
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    44
Romeo sends:
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    45
	<iq type="set" id="17fb8e7e-c75e-447c-b86f-3f1df8f507c4" to="mcgczevx@conference.localhost">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    46
		<query xmlns="http://jabber.org/protocol/muc#owner">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    47
			<x type="submit" xmlns="jabber:x:data">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    48
				<field var="FORM_TYPE">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    49
					<value>http://jabber.org/protocol/muc#roomconfig</value>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    50
				</field>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    51
				<field var="muc#roomconfig_membersonly">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    52
					<value>1</value>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    53
				</field>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    54
				<field var="muc#roomconfig_whois">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    55
					<value>anyone</value>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    56
				</field>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    57
			</x>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    58
		</query>
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    59
	</iq>
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    60
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    61
Romeo receives:
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    62
	<iq from="mcgczevx@conference.localhost" id="17fb8e7e-c75e-447c-b86f-3f1df8f507c4" type="result"/>
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    63
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    64
Romeo receives:
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    65
	<message from="mcgczevx@conference.localhost" type="groupchat">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    66
		<x xmlns="http://jabber.org/protocol/muc#user" scansion:strict="false">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    67
			<status code="104"/>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    68
			<status code="172"/>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    69
		</x>
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    70
	</message>
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    71
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    72
# Juliet is made a member
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    73
Romeo sends:
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    74
	<iq type="set" id="32d81574-e1dc-4221-b36d-4c44debb7c19" to="mcgczevx@conference.localhost">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    75
		<query xmlns="http://jabber.org/protocol/muc#admin">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    76
			<item affiliation="member" jid="${Juliet's JID}"/>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    77
		</query>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    78
	</iq>
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    79
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    80
# Juliet can read affiliations
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    81
Juliet sends:
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    82
	<iq type="get" id="32d81574-e1dc-4221-b36d-4c44debb7c19" to="mcgczevx@conference.localhost">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    83
		<query xmlns="http://jabber.org/protocol/muc#admin">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    84
			<item affiliation="owner"/>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    85
		</query>
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    86
	</iq>
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    87
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
    88
Juliet receives:
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    89
	<iq from="mcgczevx@conference.localhost" id="32d81574-e1dc-4221-b36d-4c44debb7c19" type="result">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    90
		<query xmlns="http://jabber.org/protocol/muc#admin">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    91
			<item affiliation="owner" jid="${Romeo's JID}"/>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    92
		</query>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    93
	</iq>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    94
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    95
Juliet sends:
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    96
	<iq type="get" id="05e3fe30-976f-4919-8221-ca1ac333eb9b" to="mcgczevx@conference.localhost">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    97
		<query xmlns="http://jabber.org/protocol/muc#admin">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    98
			<item affiliation="member"/>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
    99
		</query>
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
   100
	</iq>
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
   101
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   102
Juliet receives:
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   103
	<iq from="mcgczevx@conference.localhost" id="05e3fe30-976f-4919-8221-ca1ac333eb9b" type="result">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   104
		<query xmlns="http://jabber.org/protocol/muc#admin">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   105
			<item affiliation="member" jid="${Juliet's JID}"/>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   106
		</query>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   107
	</iq>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   108
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   109
# Others can't read affiliations
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   110
Random sends:
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   111
	<iq type="get" id="df1195e1-7ec8-4102-8561-3e3a1d942adf" to="mcgczevx@conference.localhost">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   112
		<query xmlns="http://jabber.org/protocol/muc#admin">
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   113
			<item affiliation="owner"/>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   114
		</query>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   115
	</iq>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   116
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   117
Random receives:
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   118
	<iq from="mcgczevx@conference.localhost" id="df1195e1-7ec8-4102-8561-3e3a1d942adf" type="error"/>
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   119
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   120
9624
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
   121
Juliet disconnects
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
   122
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
   123
Romeo disconnects
ddcb28c8f64b MUC: Add scanison test case for #1230
Kim Alvefur <zash@zash.se>
parents:
diff changeset
   124
11716
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   125
Random disconnects
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   126
d117b92fd8e4 MUC: Fix logic for access to affiliation lists
Kim Alvefur <zash@zash.se>
parents: 9624
diff changeset
   127
# recording ended on 2021-07-23T12:09:48Z