lebaudantoine f2e8b4d8cc 🔒️(backend) grant MEMBER access to the recording starter instead of OWNER ...

In the previous commit, an authenticated participant starting a
recording was granted an `OWNER` `RecordingAccess`. @briquet
pointed out that this let any starter call the API to delete the
recording, and this destructive action should be limited to
genuinely privileged users. Agreed.

Refactor: an authenticated but non-privileged starter now receives
a `MEMBER` `RecordingAccess`, so they can retrieve and download
the recording but not delete it. Room owners and administrators
still get `OWNER` access, which matches their role on the room.

Known follow-up on the docs side: ensure the transcript is shared
with all accesses granted on the recording, and that the room's
owners and admins are also owners on the resulting document.

2026-10-15 01:28:05 +02:00

..

addons

♻️(backend) align CSRF token header with Django conventions

2026-04-29 11:21:10 +02:00

analytics

✨(rooms) soft delete rooms from internal and external API

2026-10-15 00:42:32 +02:00

api

fixup! ✨(all) allow any authenticated user to start a recording

2026-10-15 00:51:40 +02:00

authentication

♻️(backend) use a dedicated auth scheme for LiveKit token auth

2026-10-09 17:37:15 +02:00

external_api

🐛(backend) lock rooms while updating them

2026-10-15 00:42:32 +02:00

management

✨(backend) purge soft-deleted rooms after a retention period

2026-10-15 00:42:32 +02:00

migrations

✨(rooms) soft delete rooms from internal and external API

2026-10-15 00:42:32 +02:00

recording

🔒️(backend) grant MEMBER access to the recording starter instead of OWNER

2026-10-15 01:28:05 +02:00

roomkit

🚚(backend) rename TelephonyService to SIPManagement

2026-08-04 19:04:14 +02:00

services

✨(rooms) soft delete rooms from internal and external API

2026-10-15 00:42:32 +02:00

static/images

✨(project) Django boilerplate

2024-06-25 12:48:54 +02:00

tasks

⚡️(backend) send recording notification emails from a Celery task

2026-10-11 23:37:00 +02:00

templatetags

📝 Fix documentation and comment typos

2026-03-10 22:56:08 +01:00

tests

🔒️(backend) grant MEMBER access to the recording starter instead of OWNER

2026-10-15 01:28:05 +02:00

__init__.py

✨(project) Django boilerplate

2024-06-25 12:48:54 +02:00

admin.py

✨(rooms) soft delete rooms from internal and external API

2026-10-15 00:42:32 +02:00

enums.py

🐛(backend) fix unescaped dot in regex pattern

2026-03-13 16:19:36 +01:00

factories.py

✨(backend) update a room's attributes from the external API

2026-09-03 17:04:07 +02:00

fields.py

⬆️(backend) upgrade pylint to 4.1.3

2026-10-15 00:42:32 +02:00

hashers.py

⚡️(backend) hash application secrets with SHA-256

2026-10-07 18:09:30 +02:00

logging_filters.py

🔇(backend) silence expected 401 warnings on /me

2026-09-09 11:17:49 +02:00

models.py

🔒️(backend) grant MEMBER access to the recording starter instead of OWNER

2026-10-15 01:28:05 +02:00

urls.py

✨(backend) introduce a token exchange endpoint for iframe embeds

2026-10-09 17:37:15 +02:00

utils.py

⬆️(backend) upgrade pylint to 4.1.3

2026-10-15 00:42:32 +02:00

validators.py

🐛(backend) allow all printable ASCII in the user sub field

2026-09-03 17:32:31 +02:00