公開アクセスの設定

公開アクセス機能を使うと、管理者は選択したチャンネルを web-public に設定できます。Web-public チャンネルは、組織のアカウントを作成しなくても、インターネット上の誰でも閲覧できます。

たとえば、web-public チャンネル内の Zulip トピックへのリンクを GitHub issue、SNS 投稿、フォーラムのスレッドなどから共有すると、リンクをクリックした人はアカウントを作成しなくても Zulip の Web アプリでその議論を閲覧できます。

この機能を実際に試すには、ログインせずに Zulip development community の web-public チャンネル を閲覧してみてください。

投稿したいユーザーは、そのためにアカウントを作成する必要があります。

Web 公開チャンネルには、地球 () アイコンが表示されます。

組織で Web 公開チャンネルを有効にする

Enabling web-public channels makes it possible to create web-public channels in your organization. It also makes certain information about your organization accessible to anyone on the Internet via the Zulip API (details below).

To help protect closed organizations, creating web-public channels is disabled by default for all organizations.

Web 公開チャンネル有効時に API 経由で参照できる情報

The following information about your organization can be accessed via the Zulip API if web-public channels are enabled and there is currently at least one web-public channel.

• The organization's settings (linkifiers, custom emoji, permissions settings, etc.)
• Names of users
• Names of user groups and their membership
• Names and descriptions of channels

Enabling web-public channels is thus primarily recommended for open communities such as open-source projects and research communities.

Web 公開チャンネルを有効または無効にする

Web 公開チャンネルを作成できる人を管理する

Web 公開チャンネルを作成する

To create a new web-public channel, follow the instructions for creating a channel, selecting the Web-public option for Who can access the channel?.

To make an existing channel web-public, follow the instructions to change the privacy of a channel, selecting the Web-public option for Who can access the channel?.

ログアウト中の訪問者にできること

Logged out visitors can browse all content in web-public channels, including using Zulip's built-in search to find conversations. Logged out visitors can only access the web-public channels in your organization, and the topics, messages (including uploaded files) and emoji reactions in those channels.

They cannot:

• View channels that are not configured as web-public channels (or see whether any such channels exist) without creating an account.
• Send messages.
• React with emoji.
• Participate in polls, or do anything else that might be visible to other users.

Logged out visitors have access to a subset of the metadata information available to any new account in the Zulip organization, detailed below.

組織に関する情報

• The Organization settings and Channel settings menus are not available to logged out visitors. However, organization settings data is required for Zulip to load, and may thus be accessed via the Zulip API.
• Logged out visitors cannot view usage statistics.

ユーザーに関する情報

Logged out visitors can see the following information about users who participate in web-public channels. They do not see this information about users who do not participate in web-public channels in the Zulip UI, though they may access it via the Zulip API.

• Name
• Avatar
• Role (e.g., Administrator)
• Join date

The following additional information is not available in the UI for logged out visitors, but may be accessed without an account via the Zulip API:

• Configured time zone
• Which user groups a user belongs to

The following information is available to all users with an account, but not to logged out visitors:

• Presence information, i.e. whether the user is currently online, their status, and whether they have set themselves as unavailable.
• Detailed profile information, such as custom profile fields.
• Which users are subscribed to which web-public channels.

不正利用への対策

The unfortunate reality is that any service that allows hosting files visible to the Internet is a potential target for bad actors looking for places to distribute illegal or malicious content.

In order to protect Zulip organizations from bad actors, web-public channels have a few limitations designed to make Zulip an inconvenient target:

• Only users in trusted roles (moderators and administrators) can be given permission to create web-public channels. This is intended to make it hard for an attacker to host malicious content in an unadvertised web-public channel in a legitimate organization.
• There are rate limits for unauthenticated access to uploaded files, including viewing avatars and custom emoji.

Our aim is to tune anti-abuse protections so that they don't interfere with legitimate use. Please contact us if your organization encounters any problems with legitimate activity caused these anti-abuse features.

As a reminder, Zulip Cloud organizations are expected to moderate content to ensure compliance with Zulip's Rules of Use.

注意事項

• Web-public channels do not yet support search engine indexing. You can use zulip-archive to create an archive of a Zulip organization that can be indexed by search engines.
• The web-public view is not yet integrated with Zulip's live-update system. As a result, a visitor will not see new messages that are sent to a topic they are currently viewing without reloading the browser window.

関連記事

• Moderating open organizations
• Channel permissions
• Restrict channel creation