access: strict policy, signed paths

"values": "signed" (strict, requiring signatures too): the registry,
_continuum/access, bans and the paths in _continuum/access/userSigned
(* for any key) hold values their users signed. Envelopes read as the
values they hold where the node reads protocol data.

Auth plan M7.

1 files changed, 1 insertions, 1 deletions

diff --git a/src/document/signatures.rs b/src/document/signatures.rs
index 63b19a5..5d8731b 100644
--- a/src/document/signatures.rs
+++ b/src/document/signatures.rs
@@ -67,7 +67,7 @@ fn related(signed: &[String], path: &[String]) -> bool {
 /// strings is left out.
 pub(crate) fn listed(doc: &Document) -> Vec<Vec<String>> {
     let at: Vec<String> = SIGNED_PATHS.iter().map(|s| (*s).to_owned()).collect();
-    let Ok(Some(serde_json::Value::Array(entries))) = super::store::read_path(doc, &at) else {
+    let Ok(Some(serde_json::Value::Array(entries))) = super::store::read_plain(doc, &at) else {
         return Vec::new();
     };
     entries