[jadmin] Preventing users from adding buddies

[David Ammouial]

On Friday 16 March 2007 05:07, Bob Puff at NLE wrote:
> How can I restrict them from adding to their list?  I tried setting
> read-only permissions on the /var/lib/jabber/(hostname)/(username) file,
> but it keeps going back to 0600.

If you can upgrade to jabberd14 v1.6, the rosters (among other things) are 
now stored in an SQL database. This gives you more control over their 
contents, in various ways. In your case, you would have some choices, for 
example:
- Give only read access to the jabberd14 daemon on the roster table, so that 
it cannot write anything in it, but you still can populate it by other 
means. I don't know how the program would behave though, since the SQL 
server would return an error.
- In jabberd14 configuration file, prevent the SQL request invoked 
on "roster set" event from inserting anything in the roster table.
- In that file again, set the SQL request invoked on "roster get" event to 
forge a specific roster based on certain criteria that you decide.

In any case, even though the desired item was not added on the server-side 
roster, check how the client behaves after trying to add it: it may assume 
that the item is now present in the roster, and show it to the user until 
the next update.

-- 
David
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mail.jabber.org/pipermail/jadmin/attachments/20070316/e31d42c4/attachment.pgp