access: the policy enforced

_continuum/access/policy ({"version": 1}) has every node screen every
change it receives, on every path changes come in. A policy a node
doesn't know stops its writes through the API. GET /admin/refused.

Auth plan M6.

1 files changed, 6 insertions, 0 deletions

diff --git a/src/document/store.rs b/src/document/store.rs
index 31c4824..778307f 100644
--- a/src/document/store.rs
+++ b/src/document/store.rs
@@ -175,6 +175,12 @@ pub(crate) enum StoreError {
     /// (`Replica::writable`).
     #[error("the node is rejoining a newer epoch; writes are refused until it is done")]
     Rejoining,
+    /// The swarm's write protection policy is one this node doesn't know
+    /// (`access::policy`): no writes through the API until it is upgraded.
+    #[error(
+        "the swarm's policy (_continuum/access/policy) is one this node doesn't know ({0}); upgrade it to write"
+    )]
+    UnknownPolicy(String),
     #[error(transparent)]
     Doc(#[from] automerge::AutomergeError),
     #[error(transparent)]