There is a mechanism in Tigase which sets permissions on packets produced by a plugin. However, the same code could be executed on incoming packets before they are processed by plugins.

We have this method in SM: setPermissions(....) which is executed on a collection of results produced by a plugin. The same method could/should be executed on a single packet while it is being processed in method: processPacket(Packet packet, XMPPResourceConnection conn).

The best place seems to be after running the packet through preprocessors and before running it through processors. I am not sure if there are any potential side-effects possible.

Wojtek, Bartek, Andrzej, any thoughts or objections?