From b5eb8236404a41dab7c1d43c6b2292ba4561b5a1 Mon Sep 17 00:00:00 2001
From: Pedro Beschorner Marin <pedrobmarin@gmail.com>
Date: Sun, 17 Apr 2022 08:10:48 -0300
Subject: [PATCH] etherpad: enforce bbb-pads session handling

At v2.5 we intoduced `bbb-pads` as a session manager for Etherpad.

Enabling `requireSession` and `editOnly` at Etherpad's settings closes
the HTTP access from all other sources besides `bbb-pads`.
---
 mod/etherpad/settings.json | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/mod/etherpad/settings.json b/mod/etherpad/settings.json
index e04f529..cd04fac 100644
--- a/mod/etherpad/settings.json
+++ b/mod/etherpad/settings.json
@@ -280,7 +280,7 @@
    * If this option is enabled, a user must have a session to access pads.
    * This effectively allows only group pads to be accessed.
    */
-  "requireSession": false,
+  "requireSession": true,
 
   /*
    * Users may edit pads but not create new ones.
@@ -288,7 +288,7 @@
    * Pad creation is only via the API.
    * This applies both to group pads and regular pads.
    */
-  "editOnly": false,
+  "editOnly": true,
 
   /*
    * If true, all css & js will be minified before sending to the client.