aboutsummaryrefslogtreecommitdiffstats
path: root/docs/access.md
diff options
context:
space:
mode:
authortv <tv@krebsco.de>2026-11-08 09:39:08 +0000
committertv <tv@krebsco.de>2026-11-08 14:28:47 +0100
commite959799c95b4d6e33f6b95d4c38a5386cc1dcf02 (patch)
treef1bf729b42b8615651c44ea8776bc63a9d83fbbf /docs/access.md
parentf2fbee33e219fdfe7b67878dc8bfa7eeb526fa65 (diff)
access: maps made on the way judged by what they hold
A write makes the maps on its way where there are none (store::write_path); the rules judged each made map as a write at its own path, so a user whose capability lies below a map not made yet (write on servers/eu, a first PUT at servers/eu/0) had its first write taken by its node and refused by every other. A map made where there was none, in a change writing within it, is now judged by what is written within it. Review finding 3 (parent maps created on the way).
Diffstat (limited to 'docs/access.md')
-rw-r--r--docs/access.md2
1 files changed, 2 insertions, 0 deletions
diff --git a/docs/access.md b/docs/access.md
index f1ed1c3..d46627a 100644
--- a/docs/access.md
+++ b/docs/access.md
@@ -228,6 +228,8 @@ stays as it is, wherever it comes from later (a joining node catching up, say).
* A user's tokens revoked by that user too (logging out).
* A member's forget record cancelled by that member too (forgotten while alive).
* Everything else, protocol data or not, by a user the registry lets write there.
+* A map made on the way to what a change writes, where there was none (`servers`, for a
+ first write at `servers/eu/0`), as what it writes within it.
* A node that isn't a member may only register itself; a banned node nothing (Banning
a node, below). So a node registers before anything else it writes, through the API
or its own: a change refused stays out with every change built on it.