diff options
| author | tv <tv@krebsco.de> | 2026-11-08 09:33:41 +0000 |
|---|---|---|
| committer | tv <tv@krebsco.de> | 2026-11-08 10:36:32 +0100 |
| commit | 47c3c7842f6c31af18cfaa2d84ada5dc83b9831b (patch) | |
| tree | 280530bae675ddb51fcc5a93e657f1016d6bdda1 /docs | |
| parent | f713fe668c29ecd60df547d989b0ace40cfe4da0 (diff) | |
access: judged by the policy written under
The rules read the policy at the change's dependencies only for strict
mode, so history from before the policy was judged by today's rules
when a late node caught up, or when REFUSALS had it judged again. A
change written while the document had no policy, or one this node
doesn't know, is now judged by none.
Review finding 6.
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/access.md | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/docs/access.md b/docs/access.md index 8443394..f1ed1c3 100644 --- a/docs/access.md +++ b/docs/access.md @@ -215,7 +215,9 @@ curl -X PUT localhost:3000/store/_continuum/access/policy \ A change is judged by what it touches, by the node that committed it, and by the user it names, as the document stood when it was written (at its dependencies): a -revocation since refuses nothing it allowed then, and every node judges alike. +revocation since refuses nothing it allowed then, and every node judges alike. One +written before the policy (at its dependencies) is judged by none: history from before +stays as it is, wherever it comes from later (a joining node catching up, say). * A member's entry (`_continuum/members/<id>`) and its votes are written by that member only; removing an entry, also by a user who may write there. |