<![CDATA[FEP-5219: Groups and permissions]]>This is a discussion thread for FEP-5219: Groups and permissions

Summary

This document describes a permission system for ActivityPub groups.

It is inspired by XEP-0045: Multi-User Chat, which defines a comprehensive permission system for XMPP group chats.

]]>https://host1.bosio.info/topic/b5ef1716-3b2b-439b-8ea9-4f219e87e244/fep-5219-groups-and-permissionsRSS for NodeTue, 22 Sep 2026 13:34:42 GMTWed, 12 Aug 2026 14:24:37 GMT60<![CDATA[Reply to FEP-5219: Groups and permissions on Thu, 13 Aug 2026 17:14:29 GMT]]>@silverpill @feps @julian great question!

The W3C Community Group contributor license agreement goes beyond copyright -- it also covers patents and other intellectual property.

https://www.w3.org/community/about/process/cla/

It's great that FEPS are CC0 -- that makes it possible to redistribute the text freely verbatim or modified. However, it doesn't protect implementers from patents and other claims.

]]>https://host1.bosio.info/post/https://cosocial.ca/users/evan/statuses/117089322217793781https://host1.bosio.info/post/https://cosocial.ca/users/evan/statuses/117089322217793781Thu, 13 Aug 2026 17:14:29 GMT<![CDATA[Reply to FEP-5219: Groups and permissions on Thu, 13 Aug 2026 16:58:22 GMT]]>@evan It depends on the terms of the agreement.

No agreement should be necessary, though - FEPs are in public domain, they can be implemented by anyone and can be included in other documents without restrictions.

Also, it is not clear what is the benefit of submitting a FEP to W3C. I already submitted it to the FEP repository, and this was always enough for everybody, including major players like Mastodon and Lemmy. These task forces look like totally unnecessary bureaucracy, I don't really have time for that.

@julian

]]>https://host1.bosio.info/post/https://mitra.social/objects/019ffc0f-8158-7692-ad79-e7b56d474715https://host1.bosio.info/post/https://mitra.social/objects/019ffc0f-8158-7692-ad79-e7b56d474715Thu, 13 Aug 2026 16:58:22 GMT<![CDATA[Reply to FEP-5219: Groups and permissions on Thu, 13 Aug 2026 15:22:56 GMT]]>@silverpill @julian @feps I'm happy to look over this FEP, but we'll continue the work in the Groups TF. Would you be willing to submit it under the W3C community group CLA so we can include it in that Task Force's work?

]]>https://host1.bosio.info/post/https://cosocial.ca/users/evan/statuses/117088883627227692https://host1.bosio.info/post/https://cosocial.ca/users/evan/statuses/117088883627227692Thu, 13 Aug 2026 15:22:56 GMT<![CDATA[Reply to FEP-5219: Groups and permissions on Thu, 13 Aug 2026 15:06:32 GMT]]>The last time I checked, not much progress had been made there. However, they are welcome to provide feedback on this FEP.

]]>https://host1.bosio.info/post/https://mitra.social/objects/019ffba9-1f77-7d61-952a-fa4dde31a129https://host1.bosio.info/post/https://mitra.social/objects/019ffba9-1f77-7d61-952a-fa4dde31a129Thu, 13 Aug 2026 15:06:32 GMT<![CDATA[Reply to FEP-5219: Groups and permissions on Thu, 13 Aug 2026 14:51:04 GMT]]>The super admin is a server operator (or the controller of a DID if group's id is an 'ap' URI).

]]>https://host1.bosio.info/post/https://mitra.social/objects/019ffb9a-f50c-79a1-82f3-7eafaf0bed3dhttps://host1.bosio.info/post/https://mitra.social/objects/019ffb9a-f50c-79a1-82f3-7eafaf0bed3dThu, 13 Aug 2026 14:51:04 GMT<![CDATA[Reply to FEP-5219: Groups and permissions on Thu, 13 Aug 2026 12:27:50 GMT]]>Is this a product of the Groups TF? Since you're the author I'm assuming that isn't the case.

It may be worth asking them to see what things they've converged on.

]]>https://host1.bosio.info/post/https://activitypub.space/post/2352https://host1.bosio.info/post/https://activitypub.space/post/2352Thu, 13 Aug 2026 12:27:50 GMT<![CDATA[Reply to FEP-5219: Groups and permissions on Thu, 13 Aug 2026 11:34:32 GMT]]>Then that should be a very explicit requirement for someone 'super' admin to execute. Which makes the onus rely on a server, or if done manually on someone possibly outside of the group.

To me it would make more sense when the Group Actor is know to have its limitations, so people can actually manage the reality of adversarial actions in a group. In stead of trying to fix social issues in a FEP. (something I've become intimately aware of )

]]>https://host1.bosio.info/post/https://socialhub.activitypub.rocks/ap/object/33269b288ef00a83673d38f0e9dd51a9https://host1.bosio.info/post/https://socialhub.activitypub.rocks/ap/object/33269b288ef00a83673d38f0e9dd51a9Thu, 13 Aug 2026 11:34:32 GMT<![CDATA[Reply to FEP-5219: Groups and permissions on Thu, 13 Aug 2026 11:08:08 GMT]]>Group actors should have the maximum privileges because some actions may need to be performed by a Group actor rather than an admin or moderator actor. This may be necessary to protect moderators from retaliation, for example. Another use case for this is anonymous groups where all posts are attributed to a Group actor (example: Telegram channels).

Multiple admin actors are already allowed - in this FEP and in FEP-1b12.

]]>https://host1.bosio.info/post/https://mitra.social/objects/019fface-da55-7bc1-9ef1-4f79ccadf1d3https://host1.bosio.info/post/https://mitra.social/objects/019fface-da55-7bc1-9ef1-4f79ccadf1d3Thu, 13 Aug 2026 11:08:08 GMT<![CDATA[Reply to FEP-5219: Groups and permissions on Thu, 13 Aug 2026 07:39:56 GMT]]>

The group actor itself is considered to have an admin affiliation.

I would make the case against this as follows:

The Group actor itself is not a human, nor a participant, if this clause was not there the Group Actor would need to make sure there remains at least one (human) external Actor as admin. Making group control loss a thing of the past. And voiding the need to 'log in on the server and manually edit group permissions'.

It would also open the door to having more than one admin on the group.

]]>https://host1.bosio.info/post/https://socialhub.activitypub.rocks/ap/object/083c72ed5e5f771855d0656b4bea638chttps://host1.bosio.info/post/https://socialhub.activitypub.rocks/ap/object/083c72ed5e5f771855d0656b4bea638cThu, 13 Aug 2026 07:39:56 GMT