#4993 NORM Never A: subscription requests should only be approved for local users

[Zarro Boogs per Child]

#4993: subscription requests should only be approved for local users
------------------------------+---------------------------------------------
 Reporter:  robot101          |       Owner:  morgs         
     Type:  defect            |      Status:  new           
 Priority:  normal            |   Milestone:  Never Assigned
Component:  presence-service  |     Version:                
 Keywords:  Update.1?         |    Verified:  0             
------------------------------+---------------------------------------------
 PS needs to check that incoming requests on the publish channel are only
 auto-approved if the user is on the local server, so that (given we don't
 yet have UI for it) server-side friending can take place automatically in
 the cases where people would be able to see each other through the shared
 roster. Currently we auto-accept all incoming requests which is
 unacceptable from a privacy perspective given that by default, jabberd
 servers can talk to each other (we also might want to consider turning
 this off on j.l.o for the time being, and also on school server
 configurations?).

-- 
Ticket URL: <http://dev.laptop.org/ticket/4993>
One Laptop Per Child <http://dev.laptop.org>
OLPC bug tracking system