only protocol-writers may modify _continuum

1 files changed, 9 insertions, 0 deletions

diff --git a/src/config/mod.rs b/src/config/mod.rs
index 4914fb6..ef28542 100644
--- a/src/config/mod.rs
+++ b/src/config/mod.rs
@@ -82,6 +82,13 @@ pub(crate) const OPTIONS: &[OptionSpec] = &[
         "Users of the HTTP API (htpasswd file with Argon2 hashes). Required.",
     ),
     option(
+        "protocol-writers",
+        Kind::List,
+        "USER,[USER...]",
+        None,
+        "HTTP API users (from htpasswd) who may write protocol data under /store/_continuum (remake records, members, forget records), e.g. to repair a stuck remake. Such writes act on the whole swarm and are logged. Epoch metadata is never writable.",
+    ),
+    option(
         "debug-api",
         Kind::Flag,
         "BOOL",
@@ -201,6 +208,8 @@ pub(crate) struct Settings {
     pub(crate) bind_addr: SocketAddr,
     pub(crate) htpasswd: String,
     #[serde(default)]
+    pub(crate) protocol_writers: Vec<String>,
+    #[serde(default)]
     pub(crate) debug_api: bool,
     #[serde(default)]
     pub(crate) seeds: Vec<String>,