From ce35e21480d07f88fc46607100659dcf863d1ffe Mon Sep 17 00:00:00 2001 From: mikecarper Date: Sat, 17 Oct 2026 21:19:04 -0700 Subject: [PATCH] Document transient guest login and post replay limits --- docs/room_services.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/docs/room_services.md b/docs/room_services.md index b33fdb834..c05eab21f 100644 --- a/docs/room_services.md +++ b/docs/room_services.md @@ -224,6 +224,16 @@ appear in Access Control alongside administrators. Automatic guest-password read/write sessions remain transient; password-created administrators remain retained. The existing permission byte is unchanged. +Guest-password logins do not allocate new durable login replay records, so +guest churn cannot fill the bounded replay store. Any existing record from a +previous privileged role still applies and is advanced. After reboot or +transient client eviction, an identity without such a record can have captured +guest login and message traffic accepted again. Assign an explicit read/write +role with `setperm 2` when durable login replay protection is required. +Room-post deduplication and per-sender post replay timestamps remain in RAM: +captured old posts can also be accepted after a legitimate newer login restores +a lost session. + ACL updates use the existing delayed settings save. Allow at least five seconds after `setperm` before removing power so the assignment reaches storage.