Post

I need opinions on a HappyView feature: inspection for atproto spaces. TL;DR - should the dashboard be give admins a clean view into spaces content? More deets in the thread. 🧵 #atproto

Basically, spaces are fully accessible to server admins. This is the same for spaces hosted by HappyView, as well as spaces on your PDS. If somebody has access to the database, they can read anything in your spaces.

Wait really? I thought it's PDS hosted space, and therefore only the PDS admin has access. I didn't realize spaces also has access. If they do, HappyView should provide the admin overview

Yeah, the intent is that the repo host (the user's PDS in most circumstances) holds the space data. However, spaces isn't generally available yet so HappyView provides a polyfill for the time being that allows operators to implement spaces, even for users whose PDS doesn't support it.

0 reposts2 likes

Since it's a polyfill, HappyView is acting as a repo host for users' spaces. That said, when an AppView is the authority for a space it'll still index the data from that space and have a fully readable copy. Basically, this will likely be a concern for /all AppViews./