Prevent toggling guests or the lobby directly

Signed-off-by: Joas Schilling <coding@schilljs.com>

1 files changed, 5 insertions, 0 deletions

diff --git a/lib/Controller/RoomController.php b/lib/Controller/RoomController.php
index 08fa7fedf..4272cde23 100644
--- a/lib/Controller/RoomController.php
+++ b/lib/Controller/RoomController.php
@@ -1740,6 +1740,11 @@ class RoomController extends AEnvironmentAwareController {
 			}
 		}
 
+		if ($this->room->getObjectType() === BreakoutRoom::PARENT_OBJECT_TYPE) {
+			// Do not allow manual changing the lobby in breakout rooms
+			return new DataResponse([], Http::STATUS_BAD_REQUEST);
+		}
+
 		if (!$this->roomService->setLobby($this->room, $state, $timerDateTime)) {
 			return new DataResponse([], Http::STATUS_BAD_REQUEST);
 		}