MediaSFU's rule is islevel === '2' || (coHost === member && <area>.value),
and it is enforced inside each action — an unauthorised call is swallowed
with an alert rather than returning an error. That makes it very easy to ship
a moderation button that silently does nothing for co-hosts. Gate your UI on
this instead.
What the local user is allowed to moderate.
MediaSFU's rule is
islevel === '2' || (coHost === member && <area>.value), and it is enforced inside each action — an unauthorised call is swallowed with an alert rather than returning an error. That makes it very easy to ship a moderation button that silently does nothing for co-hosts. Gate your UI on this instead.