MSC4289: Explicitly privilege room creators by ara4n · Pull Request #4289 · matrix-org/matrix-spec-proposals

ara4n · 2025-05-20T20:32:24Z

Rendered

(Written by Matthew as Matrix project lead (while on the clock as Element CTO) and Kegan as Element staff eng)

Process note: This MSC completed FCP in an embargoed setting. The embargoed sections will be updated once disclosed.

See https://matrix.org/blog/2025/07/security-predisclosure/ for details.

turt2live · 2025-06-06T22:50:30Z

(for clarity: this is using the process defined by matrix-org/matrix-spec#2157)

turt2live · 2025-07-22T22:39:33Z

This proposal completed FCP in an embargoed setting, and is now accepted.

turt2live · 2025-07-26T00:15:36Z

Spec PR is a WIP out of band by me.

turt2live · 2025-07-28T18:43:37Z

Spec PR is now in review (and open) out of band.

turt2live · 2025-07-28T18:45:37Z

For clarity: this MSC has been assigned to room version 12.

turt2live · 2025-07-28T23:09:32Z

proposals/4289-privilege-creators.md

+(Embargoed until Aug 11, 2025)
+
+### Security Considerations
+
+(Embargoed until Aug 11, 2025)
+
+### Credits
+
+Thanks to Timo Kösters for initiating discussion around this MSC.
+
+### Unstable prefix
+
+During development this room version is referred to as `org.matrix.hydra.11` alongside MSC4291 and MSC4297 (embargoed until Aug 11, 2025).


hmm, I didn't seem to mention it at the time (sorry), but these dates were fixed in #4314 to be August 14th instead.

turt2live · 2025-07-29T19:01:34Z

proposals/4289-privilege-creators.md

+ - The new room does not have Alice as a creator or additional creator.
+
+This allows the creator status to move between users.
+


This section is updated by #4315

* Support for creator power level Adds support for infinite power level specified by [MSC4289](matrix-org/matrix-spec-proposals#4289). * Update unit test * Hardcode versions as room versions strings aren't ordered * Add test for v12 rooms * Use more compact syntax Co-authored-by: R Midhun Suresh <hi@midhun.dev> * Fix doc Co-authored-by: R Midhun Suresh <hi@midhun.dev> * Fix additionalCreators from PR edit * Split out hydra room version check * Move power level logic into room state Which already has knowledge of the room create event * Add docs * Fix unused bits * Fix docs * Fix lying docstring * Reverse logic for hydra semantics Assume unknown room versions do use hydra * Use backticks Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * Switch back to hardcoding just the two hydra versions --------- Co-authored-by: R Midhun Suresh <hi@midhun.dev> Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>

* Support for creator power level Adds support for infinite power level specified by [MSC4289](matrix-org/matrix-spec-proposals#4289). * Update unit test * Hardcode versions as room versions strings aren't ordered * Add test for v12 rooms * Use more compact syntax Co-authored-by: R Midhun Suresh <hi@midhun.dev> * Fix doc Co-authored-by: R Midhun Suresh <hi@midhun.dev> * Fix additionalCreators from PR edit * Split out hydra room version check * Move power level logic into room state Which already has knowledge of the room create event * Add docs * Fix unused bits * Fix docs * Fix lying docstring * Reverse logic for hydra semantics Assume unknown room versions do use hydra * Use backticks Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * Switch back to hardcoding just the two hydra versions --------- Co-authored-by: R Midhun Suresh <hi@midhun.dev> Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> (cherry picked from commit e119bf9)

* Support for creator power level Adds support for infinite power level specified by [MSC4289](matrix-org/matrix-spec-proposals#4289). * Update unit test * Hardcode versions as room versions strings aren't ordered * Add test for v12 rooms * Use more compact syntax * Fix doc * Fix additionalCreators from PR edit * Split out hydra room version check * Move power level logic into room state Which already has knowledge of the room create event * Add docs * Fix unused bits * Fix docs * Fix lying docstring * Reverse logic for hydra semantics Assume unknown room versions do use hydra * Use backticks * Switch back to hardcoding just the two hydra versions --------- (cherry picked from commit e119bf9) Co-authored-by: David Baker <dbkr@users.noreply.github.com> Co-authored-by: R Midhun Suresh <hi@midhun.dev> Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>

turt2live · 2025-08-14T01:29:58Z

proposals/4289-privilege-creators.md

+
+### Alternatives
+
+(Embargoed until Aug 11, 2025)


Embargoed sections are added in #4328

turt2live · 2025-08-14T17:16:38Z

Merged 🎉

whitequark · 2025-08-28T12:23:06Z

The Room Administration page links here from this sentence:

You could also consider setting up backup accounts on homeservers as additional_creators, in case one of them becomes unavailable.

How the hell am I supposed to do that? There's no explanation anywhere in the documentation.

msc4289 placeholder

1d3b947

ara4n changed the title ~~MSC4289 Placeholder~~ [WIP] Placeholder May 20, 2025

turt2live added proposal A matrix spec change proposal needs-implementation This MSC does not have a qualifying implementation for the SCT to review. The MSC cannot enter FCP. labels May 20, 2025

turt2live marked this pull request as draft May 20, 2025 22:16

turt2live added proposal-placeholder This label is removed and replaced with `proposal` once the placeholder status is cleared. action-required Just a bright label to differentiate arbitrary proposals. and removed proposal A matrix spec change proposal labels Jul 3, 2025

turt2live added this to Spec Core Team Workflow Jul 8, 2025

github-project-automation bot moved this to Tracking for review in Spec Core Team Workflow Jul 8, 2025

turt2live moved this from Tracking for review to Ready for general review in Spec Core Team Workflow Jul 8, 2025

turt2live moved this from Ready for general review to In FCP in Spec Core Team Workflow Jul 16, 2025

turt2live moved this from In FCP to Requires spec writing in Spec Core Team Workflow Jul 22, 2025

Populate MSC

ee0a2c8

turt2live changed the title ~~[WIP] Placeholder~~ MSC4289: Explicitly privilege room creators Jul 22, 2025

turt2live marked this pull request as ready for review July 22, 2025 22:38

turt2live added the finished-final-comment-period label Jul 22, 2025

turt2live merged commit 3d68238 into main Jul 22, 2025
1 check passed

turt2live removed the finished-final-comment-period label Jul 22, 2025

dbkr mentioned this pull request Jul 23, 2025

Support for creator power level matrix-org/matrix-js-sdk#4937

Merged

4 tasks

Kladki mentioned this pull request Jul 24, 2025

common,events,client-api: Implement project hydra changes ruma/ruma#2163

Merged

turt2live self-assigned this Jul 26, 2025

turt2live moved this from Requires spec writing to Requires spec PR review in Spec Core Team Workflow Jul 28, 2025

turt2live reviewed Jul 29, 2025

View reviewed changes

manuroe mentioned this pull request Aug 6, 2025

[Story] Assign owner on leave element-hq/element-meta#2925

Open

3 tasks

Cyborgscode mentioned this pull request Aug 11, 2025

Security Release 2025-08-11: matrix room level 12 needs to be supported SchildiChat/schildichat-desktop#296

Closed

turt2live reviewed Aug 14, 2025

View reviewed changes

proposals/4289-privilege-creators.md

### Alternatives

(Embargoed until Aug 11, 2025)

Copy link

Member

turt2live Aug 14, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Embargoed sections are added in #4328

anoadragon453 mentioned this pull request Aug 14, 2025

Add tests for downgrading a v12 room to one that doesn't support MSC4289 matrix-org/complement#794

Open

turt2live added merged A proposal whose PR has merged into the spec! and removed spec-pr-in-review A proposal which has been PR'd against the spec and is in review action-required Just a bright label to differentiate arbitrary proposals. labels Aug 14, 2025

turt2live moved this from Requires spec PR review to Merged in Spec Core Team Workflow Aug 14, 2025

ara4n mentioned this pull request Aug 14, 2025

Should room creators always be able to give themselves power? (SPEC-369) matrix-org/matrix-spec#165

Closed

zecakeh mentioned this pull request Sep 12, 2025

Implement Matrix 1.16 changes ruma/ruma#2215

Closed

31 tasks

ara4n mentioned this pull request Jan 7, 2026

MSC3915: Owner power level #3915

Closed

tulir removed the maybe v13? candidate for room version 13 label Jan 13, 2026

This was referenced Jan 29, 2026

TI-M on Matrix v1.16 gematik/api-ti-messenger#340

Open

Support Matrix 1.16 element-hq/synapse#19414

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

MSC4289: Explicitly privilege room creators#4289

MSC4289: Explicitly privilege room creators#4289
turt2live merged 2 commits intomainfrom
matthew/msc4289

ara4n commented May 20, 2025 •

edited

Loading

Uh oh!

turt2live commented Jun 6, 2025

Uh oh!

turt2live commented Jul 22, 2025

Uh oh!

Uh oh!

turt2live commented Jul 26, 2025

Uh oh!

turt2live commented Jul 28, 2025

Uh oh!

turt2live commented Jul 28, 2025

Uh oh!

turt2live Jul 28, 2025

Uh oh!

turt2live Jul 29, 2025

Uh oh!

turt2live Aug 14, 2025

Uh oh!

turt2live commented Aug 14, 2025

Uh oh!

whitequark commented Aug 28, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

		- The new room does not have Alice as a creator or additional creator.

		This allows the creator status to move between users.

Comments

Conversation

ara4n commented May 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

turt2live commented Jun 6, 2025

Uh oh!

turt2live commented Jul 22, 2025

Uh oh!

Uh oh!

turt2live commented Jul 26, 2025

Uh oh!

turt2live commented Jul 28, 2025

Uh oh!

turt2live commented Jul 28, 2025

Uh oh!

turt2live Jul 28, 2025

Choose a reason for hiding this comment

Uh oh!

turt2live Jul 29, 2025

Choose a reason for hiding this comment

Uh oh!

turt2live Aug 14, 2025

Choose a reason for hiding this comment

Uh oh!

turt2live commented Aug 14, 2025

Uh oh!

whitequark commented Aug 28, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

ara4n commented May 20, 2025 •

edited

Loading