KamoCRM

A room is never served on its white-label parent's host

FixMediaService
Shipped
November 15, 2026 at 5:10 AM UTC
Author
Kamo
Commit
34a9ccf

Owner decision 2026-11-14: MeetRoomHostPolicy (GET /api/meet/room-access) admits a Kamo room only on a platform meet host or meet.<a domain the room's OWN organization verified>. The security-provider (parent) exception is removed, so invite links minted on a parent's host before 2026-11-14 stop working, on purpose. Members of other orgs on an admitted host keep getting the guest prompt (sidecar rule, unchanged). MeetRoomHostPolicyTest now pins the room org's own parent as refused.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing