Ah! Thanks for the source-link. Maybe the OwnerId or GroupId is always null?
Hmm.. Von: Maxim Solodovnik [mailto:solomax...@gmail.com] Gesendet: Monday, July 25, 2016 4:44 AM An: Openmeetings user-list <user@openmeetings.apache.org> Betreff: Re: Private Recordings accesible to all Users! Hello Andre, actually permissions are being checked [1] I'll double-check this today (I hope I'll have enough time) [1] https://github.com/apache/openmeetings/blob/3.1.x/openmeetings-web/src/main/java/org/apache/openmeetings/web/util/RecordingResourceReference.java#L86 On Sat, Jul 23, 2016 at 8:02 AM, Andre Wruszczak <wruszc...@web.de <mailto:wruszc...@web.de> > wrote: Dear Openmeetings-Dev-Team, I have yet another question. Is it possible to force userid validation for recordings? Maybe because my browser is storing my sessionID, but when I switch users, all of them can see the recordings of other people if they try the url : http://localhost:5080/openmeetings/recordings/mp4/47 ->Anyone logged in can get access to all recordings if they are tenacious enough to try all the numbers. Maybe I have made a mistake while setting up OM? (Current Version 3.1.1) With lots of regards, Andre -- WBR Maxim aka solomax
