If you are using reservations (tested on workplace in browser) with QR codes, when you scan the code for the room it does not authenticate if you were the person the reservation was booked by/for, it will let anyone check in and out of the reservation. This is a problem with unknowing/malicious users ending the reservations for others to book the space. It would be very useful to have a config to add this restriction to the display of the check in/out button for reservations.