Recording visibility settings not working - unauthenticated access

[panzli]

A protected or public/protected recording is accessible without any kind of authentication.

Today I tried to restrict the access to a recording, but only unpublished changed the accessibility.

root@bbb:/home/x# bbb-conf  --version

BigBlueButton Server 3.0.5 (2424)

ii  bbb-apps-akka                          1:3.0-264                               all          BigBlueButton Apps (Akka)
ii  bbb-config                             1:3.0-67                                amd64        BigBlueButton configuration utilities
ii  bbb-etherpad                           1:3.0-8                                 amd64        The EtherPad Lite components for BigBlueButton
ii  bbb-export-annotations                 1:3.0-27                                amd64        BigBlueButton Export Annotations
ii  bbb-freeswitch-core                    2:3.0-11                                amd64        BigBlueButton build of FreeSWITCH
ii  bbb-freeswitch-sounds                  1:3.0-3                                 amd64        FreeSWITCH Sounds
ii  bbb-fsesl-akka                         1:3.0-90                                all          BigBlueButton FS-ESL (Akka)
ii  bbb-graphql-actions                    1:3.0-69                                amd64        BigBlueButton GraphQL Actions
ii  bbb-graphql-middleware                 1:3.0-130                               amd64        GraphQL middleware component for BigBlueButton
ii  bbb-graphql-server                     1:3.0-245                               amd64        GraphQL server component for BigBlueButton
ii  bbb-html5                              1:3.0-1192                              amd64        The HTML5 components for BigBlueButton
ii  bbb-learning-dashboard                 1:3.0-38                                amd64        BigBlueButton bbb-learning-dashboard
ii  bbb-libreoffice-docker                 1:3.0-7                                 amd64        BigBlueButton setup for LibreOffice running in docker
ii  bbb-mkclean                            1:3.0-2                                 amd64        Clean and optimize Matroska and WebM files
ii  bbb-pads                               1:3.0-8                                 amd64        BigBlueButton Pads
ii  bbb-playback                           1:3.0-15                                amd64        Player for BigBlueButton presentation format recordings
ii  bbb-playback-presentation              1:3.0-5                                 amd64        BigBlueButton presentation recording format
ii  bbb-playback-video                     1:3.0-4                                 amd64        BigBlueButton video recording format
ii  bbb-presentation-video                 5.0.0~beta2                             all          Render BigBlueButton recording events.xml to a video
ii  bbb-record-core                        1:3.0-26                                amd64        BigBlueButton record and playback
ii  bbb-web                                1:3.0-157                               amd64        BigBlueButton API
ii  bbb-webrtc-recorder                    1:3.0-10                                amd64        BigBlueButton WebRTC Recorder
ii  bbb-webrtc-sfu                         1:3.0-43                                amd64        BigBlueButton WebRTC SFU
ii  bigbluebutton                          1:3.0-2                                 amd64        Open source web conferencing platform (bbb)
ii  libopusenc0                            0.2.1-1bbb2                             amd64        High-level API for encoding Ogg Opus audio streams


Greenlight Version 3.5

[rautniraj]

same issue. Even changing the visibility to protected or unpublished...if i had shared the link to anyone when the recording was public then he can open the recordings, no matter whats the visibility.

Do let me know if u have any fix

[panzli]

@rautniraj Unfortunately I couldn't find a solution, I'll try to solve it via an webserver authentication generally.

[rautniraj]

thank you for your idea. Once you have tested your solution...let me know so that i can take help from yours one..if not an issue for you

[defnull]

See #6132 (comment)