Skip to content

[stable34] fix(call): return proper permission errors when starting a call is not allowed - #18672

Merged
nickvergessen merged 4 commits into
stable34from
backport/18664/stable34
Jul 15, 2026
Merged

nickvergessen merged 4 commits into
stable34from
backport/18664/stable34

Conversation

@backportbot

@backportbot backportbot Bot commented Jul 15, 2026 •

Copy link
Copy Markdown

Backport of #18664

Warning, This backport's changes differ from the original and might be incomplete ⚠️

Todo

  • Review and resolve any conflicts
  • Review and verify the backported changes
  • Amend HEAD commit to remove the line stating to skip CI

Learn more about backports at https://docs.nextcloud.com/server/stable/go.php?to=developer-backports.

…ng a call

The proxying server only accepted 200/400/404 from the host when joining
a federated call. A 403 - returned by the host e.g. when start_calls
restricts who may start calls and the federated participant is not
allowed - was wrapped into a CannotReachRemoteException, so users saw
what looked like a connection error instead of a permission error.

Accept 403 as an expected status code, document it on the endpoint and
regenerate the OpenAPI spec and types.

Assisted-by: ClaudeCode:claude-fable-5
Signed-off-by: Pascal Kienast <info@pascalkienast.de>
… allowed

When the signaling backend join path marks the first participant as
in-call and that participant is not allowed to start the call, the
ForbiddenException thrown by the RestrictStartingCalls listener escaped
uncaught, so the HPB received an unstructured error instead of a proper
backend error. SIP dial-in into a not-yet-started call is one way to
reach this path.

Catch the exception and return a structured 'start_call_not_allowed'
backend error instead.

Assisted-by: ClaudeCode:claude-fable-5
Signed-off-by: Pascal Kienast <info@pascalkienast.de>
@backportbot
backportbot Bot requested a review from nickvergessen July 15, 2026 08:05
@backportbot backportbot Bot added bug feature: api 🛠️ OCS API for conversations, chats and participants feature: call 📹 Voice and video calls feature: federation 🌐 AI assisted This PR contains AI-assisted commits labels Jul 15, 2026
@backportbot backportbot Bot added this to the 🏖️ Next Patch (34) milestone Jul 15, 2026
…ll" settings

Signed-off-by: Joas Schilling <coding@schilljs.com>
Signed-off-by: Joas Schilling <coding@schilljs.com>
@nickvergessen
nickvergessen force-pushed the backport/18664/stable34 branch from f266f70 to 4d2d53f Compare July 15, 2026 08:16
@nickvergessen
nickvergessen marked this pull request as ready for review July 15, 2026 10:30
@nickvergessen
nickvergessen merged commit da7122e into stable34 Jul 15, 2026
77 of 80 checks passed
@nickvergessen
nickvergessen deleted the backport/18664/stable34 branch July 15, 2026 10:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

AI assisted This PR contains AI-assisted commits bug feature: api 🛠️ OCS API for conversations, chats and participants feature: call 📹 Voice and video calls feature: federation 🌐

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants