access: logouts apart from users' entries

_continuum/logouts/<name> holds when a user's tokens were last revoked,
written by the user itself or by one who may manage users, so users'
entries can be signed by their managers alone.

Auth plan M7.

1 files changed, 2 insertions, 0 deletions

diff --git a/src/document/meta.rs b/src/document/meta.rs
index df7741a..691cf40 100644
--- a/src/document/meta.rs
+++ b/src/document/meta.rs
@@ -20,6 +20,7 @@
 //! * `access/policy`: whether every node judges received changes (`access::policy`).
 //! * `access/userSigned`: the paths whose values their users sign (`access::envelope`).
 //! * `banned/<pk>`: banned nodes (`access::bans`).
+//! * `logouts/<name>`: when a user's tokens were last revoked (`access::registry`).
 
 /// The key every protocol path starts with.
 pub(crate) const ROOT: &str = "_continuum";
@@ -36,6 +37,7 @@ pub(crate) const DISSEMINATION: &str = "dissemination";
 pub(crate) const USERS: &str = "users";
 pub(crate) const ACCESS: &str = "access";
 pub(crate) const BANNED: &str = "banned";
+pub(crate) const LOGOUTS: &str = "logouts";
 
 /// The store path `_continuum/<parts…>`.
 pub(crate) fn path(parts: &[&str]) -> Vec<String> {