Anonymous user

client/src/app/domain/definitions/permission.config.ts

@@ -7,6 +7,7 @@ export type PermissionsMap = { [key in Permission]?: Permission[] };
 export interface DisplayPermission {
     display_name: string;
     help_text?: string;
+    anon_allowed?: boolean;
     value: Permission;
 }
 
@@ -24,13 +25,15 @@ export const PERMISSIONS: AppPermission[] = [
                 help_text: _(
                     `Can see the Autopilot menu item with all content for which appropriate permissions are set.`
                 ),
+                anon_allowed: true,
                 value: Permission.meetingCanSeeAutopilot
             },
             {
                 display_name: _(`Can see the projector`),
                 help_text: _(
                     `Can see the Projector menu item and all projectors (in the Autopilot as well as in the Projector menu item)`
                 ),
+                anon_allowed: true,
                 value: Permission.projectorCanSee
             },
             {
@@ -46,11 +49,13 @@ export const PERMISSIONS: AppPermission[] = [
             {
                 display_name: _(`Can see agenda`),
                 help_text: _(`Can see the Agenda menu item and all public topics in the agenda.`),
+                anon_allowed: true,
                 value: Permission.agendaItemCanSee
             },
             {
                 display_name: _(`Can see internal items and time scheduling of agenda`),
                 help_text: _(`Can see all internal topics, schedules and comments.`),
+                anon_allowed: true,
                 value: Permission.agendaItemCanSeeInternal
             },
             {
@@ -63,6 +68,7 @@ export const PERMISSIONS: AppPermission[] = [
             {
                 display_name: _(`Can see list of speakers`),
                 help_text: _(`Can see all lists of speakers`),
+                anon_allowed: true,
                 value: Permission.listOfSpeakersCanSee
             },
             {
@@ -74,7 +80,7 @@ export const PERMISSIONS: AppPermission[] = [
             },
             {
                 display_name: _(`Can put oneself on the list of speakers`),
-                help_text: _(`Is allowed to add himself/herself to the list of speakers. 
+                help_text: _(`Is allowed to add himself/herself to the list of speakers.
 
 Note:
 Optional combination of requests to speak with presence status is possible. ( > [Settings] > [List of speakers] > [General] )`),
@@ -88,6 +94,7 @@ Optional combination of requests to speak with presence status is possible. ( >
             {
                 display_name: _(`Can see moderation notes`),
                 help_text: _(`Can see all moderation notes in each list of speakers.`),
+                anon_allowed: true,
                 value: Permission.agendaItemCanSeeModeratorNotes
             },
             {
@@ -105,6 +112,7 @@ Optional combination of requests to speak with presence status is possible. ( >
                 help_text: _(
                     `Can see the Motions menu item and all motions unless they are limited by access restrictions in the workflow.`
                 ),
+                anon_allowed: true,
                 value: Permission.motionCanSee
             },
             {
@@ -114,6 +122,7 @@ Optional combination of requests to speak with presence status is possible. ( >
 
 Tip: Cross-check desired visibility of motions with test delegate account. `
                 ),
+                anon_allowed: true,
                 value: Permission.motionCanSeeInternal
             },
             {
@@ -133,10 +142,10 @@ Tip: Cross-check desired visibility of motions with test delegate account. `
             {
                 display_name: _(`Can forward motions`),
                 help_text: _(
-                    `Can forward motions to other meetings within the OpenSlides instance. 
+                    `Can forward motions to other meetings within the OpenSlides instance.
 
 Further requirements:
-1. forwarding hierarchy must be set at the organizational level in the committee. 
+1. forwarding hierarchy must be set at the organizational level in the committee.
 2. target meeting must be created.
 3. forwarding must be activated in the workflow in the state.`
                 ),
@@ -176,10 +185,11 @@ Further requirements:
             {
                 display_name: _(`Can see elections`),
                 help_text: _(
-                    `Can see the menu item Elections, including the list of candidates and results. 
+                    `Can see the menu item Elections, including the list of candidates and results.
 
 Note: The right to vote is defined directly in the ballot.`
                 ),
+                anon_allowed: true,
                 value: Permission.assignmentCanSee
             },
             {
@@ -191,7 +201,7 @@ Note: The right to vote is defined directly in the ballot.`
             },
             {
                 display_name: _(`Can nominate another participant`),
-                help_text: _(`Can nominate other participants as candidates. 
+                help_text: _(`Can nominate other participants as candidates.
 
 Requires group permission: [Can see participants]`),
                 value: Permission.assignmentCanNominateOther
@@ -209,15 +219,17 @@ Requires group permission: [Can see participants]`),
             {
                 display_name: _(`Can see participants`),
                 help_text: _(
-                    `Can see the menu item Participants and therefore the following data from all participants: 
-Personal data: Name, pronoun, gender. 
+                    `Can see the menu item Participants and therefore the following data from all participants:
+Personal data: Name, pronoun, gender.
 Meeting specific information: Structure level, Group, Participant number, About me, Presence status.`
                 ),
+                anon_allowed: true,
                 value: Permission.userCanSee
             },
             {
                 display_name: _(`Can see sensitive data`),
                 help_text: _(`Can see email, username and SSO identification of all participants.`),
+                anon_allowed: true,
                 value: Permission.userCanSeeSensitiveData
             },
             {
@@ -245,6 +257,7 @@ Meeting specific information: Structure level, Group, Participant number, About
                 help_text: _(`Can see the Files menu item and all shared folders and files.
 
 Note: Sharing of folders and files may be restricted by group assignment.`),
+                anon_allowed: true,
                 value: Permission.mediafileCanSee
             },
             {
@@ -267,22 +280,25 @@ Note: Sharing of folders and files may be restricted by group assignment.`),
             {
                 display_name: _(`Can see the front page`),
                 help_text: _(`Can see the Home menu item.`),
+                anon_allowed: true,
                 value: Permission.meetingCanSeeFrontpage
             },
             {
                 display_name: _(`Can see the live stream`),
                 help_text: _(
                     `Can see the livestream if there is a livestream URL entered in > [Settings] > [Livestream].`
                 ),
+                anon_allowed: true,
                 value: Permission.meetingCanSeeLivestream
             },
             {
                 display_name: _(`Can see history`),
                 help_text: _(
-                    `Can see the History menu item with the history of processing timestamps for motions, elections and participants. 
+                    `Can see the History menu item with the history of processing timestamps for motions, elections and participants.
 
 Note: For privacy reasons, it is recommended to limit the rights to view the History significantly.`
                 ),
+                anon_allowed: true,
                 value: Permission.meetingCanSeeHistory
             },
             {

client/src/app/domain/models/meetings/meeting.ts

@@ -253,6 +253,7 @@ export class Meeting extends BaseModel<Meeting> {
 
     public default_group_id!: Id; // group/default_group_for_meeting_id;
     public admin_group_id!: Id; // group/admin_group_for_meeting_id;
+    public anonymous_group_id!: Id; // group/anonymous_group_for_meeting_id;
 
     public list_of_speakers_countdown_id: Id; // projector_countdown/used_as_list_of_speakers_meeting_id;
     public poll_countdown_id: Id; // projector_countdown/used_as_poll_countdown_meeting_id;
@@ -513,7 +514,8 @@ export class Meeting extends BaseModel<Meeting> {
         `default_projector_motion_poll_ids`,
         `default_projector_poll_ids`,
         `default_group_id`,
-        `admin_group_id`
+        `admin_group_id`,
+        `anonymous_group_id`
     ];
 }
 export interface Meeting

client/src/app/domain/models/users/group.ts

@@ -17,6 +17,7 @@ export class Group extends BaseModel<Group> {
 
     public meeting_user_ids!: Id[]; // (meeting_user/group_ids)[];
     public default_group_for_meeting_id!: Id; // meeting/default_group_id;
+    public anonymous_group_for_meeting_id!: Id; // meeting/admin_group_id;
     public admin_group_for_meeting_id!: Id; // meeting/admin_group_id;
     public meeting_mediafile_access_group_ids!: Id[]; // (mediafile/access_group_ids)[];
     public meeting_mediafile_inherited_access_group_ids!: Id[]; // (mediafile/inherited_access_group_ids)[];
@@ -34,6 +35,10 @@ export class Group extends BaseModel<Group> {
         return !!this.admin_group_for_meeting_id;
     }
 
+    public get isAnonymousGroup(): boolean {
+        return !!this.anonymous_group_for_meeting_id;
+    }
+
     public get isDefaultGroup(): boolean {
         return !!this.default_group_for_meeting_id;
     }
@@ -50,6 +55,7 @@ export class Group extends BaseModel<Group> {
         `weight`,
         `meeting_user_ids`,
         `default_group_for_meeting_id`,
+        `anonymous_group_for_meeting_id`,
         `admin_group_for_meeting_id`,
         `meeting_mediafile_access_group_ids`,
         `meeting_mediafile_inherited_access_group_ids`,

client/src/app/gateways/repositories/meeting-repository.service.ts

@@ -73,7 +73,8 @@ export class MeetingRepositoryService extends BaseRepository<ViewMeeting, Meetin
             `committee_id`,
             `group_ids`,
             `language`,
-            `locked_from_inside`
+            `locked_from_inside`,
+            `enable_anonymous`
         ]);
         const detailEditFields: TypedFieldset<Meeting> = [
             `default_meeting_for_committee_id`,

client/src/app/infrastructure/definitions/relations/relations.ts

@@ -653,6 +653,12 @@ export const RELATIONS: Relation[] = [
         AField: `default_group`,
         BField: `default_group_for_meeting`
     }),
+    ...makeO2O({
+        AViewModel: ViewMeeting,
+        BViewModel: ViewGroup,
+        AField: `anonymous_group`,
+        BField: `anonymous_group_for_meeting`
+    }),
     ...makeO2O({
         AViewModel: ViewMeeting,
         BViewModel: ViewGroup,

client/src/app/site/modules/global-headbar/components/account-button/account-button.component.html

@@ -1,7 +1,11 @@
 <div class="flex-center" data-cy="accountButton" [matMenuTriggerFor]="userMenu">
     <div class="operator-information flex-center">
         <div class="first-line one-line">
-            {{ username }}
+            @if (isLoggedIn) {
+                {{ username }}
+            } @else {
+                {{ 'Public Access' | translate }}
+            }
         </div>
     </div>
     <div class="fake-fab-button flex-center">
@@ -15,7 +19,13 @@
         <div (mouseenter)="closeLanguageMenu()">
             <div class="username-wrapper action-title">
                 <div>
-                    <div class="username">{{ username }}</div>
+                    <div class="username">
+                        @if (isLoggedIn) {
+                            {{ username }}
+                        } @else {
+                            {{ 'Public Access' | translate }}
+                        }
+                    </div>
                     @if (user) {
                         <div class="subtitle">{{ getOmlVerboseName() | translate }}</div>
                     }

client/src/app/site/modules/global-headbar/components/account-button/account-button.component.ts

@@ -135,7 +135,11 @@ export class AccountButtonComponent extends BaseUiComponent implements OnInit {
 
     public async login(): Promise<void> {
         await this.authService.logoutAnonymous();
-        this.router.navigate([`/`, this.activeMeetingId, `login`]);
+        if (this.activeMeetingId) {
+            this.router.navigate([`/`, this.activeMeetingId, `login`]);
+        } else {
+            this.router.navigate([`/`, `login`]);
+        }
     }
 
     public async logout(): Promise<void> {
@@ -181,7 +185,7 @@ export class AccountButtonComponent extends BaseUiComponent implements OnInit {
 
     private onOperatorUpdate(): void {
         this.isLoggedIn = !this.operator.isAnonymous;
-        this.username = this.isLoggedIn ? this.operator.shortName : this.translate.instant(`Guest`);
+        this.username = this.operator.shortName;
         const userId = this.operator.operatorId;
         if (this._userId !== userId) {
             this._userId = userId;

client/src/app/site/pages/login/pages/login-mask/components/login-mask/login-mask.component.html

@@ -43,7 +43,7 @@ <h1>
                 <br />
                 @if (guestsEnabled) {
                     <button class="login-button" mat-stroked-button type="button" (click)="guestLogin()">
-                        {{ 'Login as guest' | translate }}
+                        {{ 'Public access' | translate }}
                     </button>
                 }
                 <br />
@@ -93,7 +93,6 @@ <h1>
 
         <!-- login button -->
         <br />
-        <!-- TODO: Next to each other...-->
         <button
             class="login-button"
             color="primary"
@@ -110,7 +109,7 @@ <h1>
         </button>
         @if (guestsEnabled && showExtra) {
             <button class="login-button" mat-stroked-button type="button" (click)="guestLogin()">
-                {{ 'Login as guest' | translate }}
+                {{ 'Public access' | translate }}
             </button>
         }
 

client/src/app/site/pages/login/pages/login-mask/components/login-mask/login-mask.component.ts

@@ -8,7 +8,7 @@ import { Meeting } from 'src/app/domain/models/meetings/meeting';
 import { fadeInAnim } from 'src/app/infrastructure/animations';
 import { BaseMeetingComponent } from 'src/app/site/pages/meetings/base/base-meeting.component';
 import { ViewMeeting } from 'src/app/site/pages/meetings/view-models/view-meeting';
-import { OrganizationService } from 'src/app/site/pages/organization/services/organization.service';
+import { ORGANIZATION_ID, OrganizationService } from 'src/app/site/pages/organization/services/organization.service';
 import { OrganizationSettingsService } from 'src/app/site/pages/organization/services/organization-settings.service';
 import { ViewOrganization } from 'src/app/site/pages/organization/view-models/view-organization';
 import { AuthService } from 'src/app/site/services/auth.service';
@@ -90,6 +90,7 @@ export class LoginMaskComponent extends BaseMeetingComponent implements OnInit,
     private loginMessage = `Loading data. Please wait ...`;
 
     private currentMeetingId: number | null = null;
+    private guestMeetingId: number | null = null;
 
     public constructor(
         protected override translate: TranslateService,
@@ -134,6 +135,8 @@ export class LoginMaskComponent extends BaseMeetingComponent implements OnInit,
         this.route.params.subscribe(params => {
             if (params[`meetingId`]) {
                 this.loadMeeting(params[`meetingId`]);
+            } else {
+                this.loadActiveMeetings();
             }
         });
 
@@ -184,7 +187,7 @@ export class LoginMaskComponent extends BaseMeetingComponent implements OnInit,
 
     public async guestLogin(): Promise<void> {
         await this.authService.anonLogin();
-        this.osRouter.navigateAfterLogin(this.currentMeetingId);
+        this.osRouter.navigateAfterLogin(this.currentMeetingId || this.guestMeetingId);
     }
 
     public async samlLogin(): Promise<void> {
@@ -239,6 +242,26 @@ export class LoginMaskComponent extends BaseMeetingComponent implements OnInit,
         this.guestsEnabled = this.meeting.enable_anonymous;
     }
 
+    private async loadActiveMeetings(): Promise<void> {
+        const resp = await this.autoupdate.single(
+            await this.modelRequestBuilder.build({
+                ids: [ORGANIZATION_ID],
+                viewModelCtor: ViewOrganization,
+                follow: [{ idField: `active_meeting_ids`, fieldset: [`enable_anonymous`] }]
+            }),
+            `meeting_login`
+        );
+        if (!resp || !resp[`meeting`]) {
+            return;
+        }
+        const publicMeetings = Object.values(resp[`meeting`]).filter(m => m[`enable_anonymous`]);
+
+        this.guestsEnabled = !!publicMeetings.length;
+        if (publicMeetings.length === 1) {
+            this.guestMeetingId = publicMeetings[0][`id`];
+        }
+    }
+
     private checkDevice(): void {
         if (!this.browserSupport.isBrowserSupported()) {
             this.router.navigate([`./unsupported-browser`], { relativeTo: this.route });

client/src/app/site/pages/meetings/meetings-routing.module.ts

@@ -13,9 +13,7 @@ const routes: Routes = [
         children: [
             {
                 path: ``,
-                loadChildren: () => import(`./pages/home/home.module`).then(m => m.HomeModule),
-                data: { meetingPermissions: [Permission.meetingCanSeeFrontpage] },
-                canLoad: [PermissionGuard]
+                loadChildren: () => import(`./pages/home/home.module`).then(m => m.HomeModule)
             },
             {
                 path: `agenda`,

client/src/app/site/pages/meetings/modules/meetings-navigation/components/meetings-navigation-wrapper/meetings-navigation-wrapper.component.ts

@@ -38,10 +38,7 @@ export class MeetingsNavigationWrapperComponent extends BaseMeetingComponent imp
     }
 
     public get showMeetingNav(): boolean {
-        return (
-            !this.operator.isAnonymous &&
-            (this.operator.knowsMultipleMeetings || this.operator.hasOrganizationPermissions())
-        );
+        return this.operator.knowsMultipleMeetings || this.operator.hasOrganizationPermissions();
     }
 
     public get meeting(): ViewMeeting | null {