aboutsummaryrefslogtreecommitdiffstats
path: root/src/access/rules.rs
diff options
context:
space:
mode:
Diffstat (limited to 'src/access/rules.rs')
-rw-r--r--src/access/rules.rs2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/access/rules.rs b/src/access/rules.rs
index d8162a6..d120961 100644
--- a/src/access/rules.rs
+++ b/src/access/rules.rs
@@ -265,6 +265,8 @@ pub(crate) fn judge_reading(
}
// Written by a root only.
(Some(meta::EPOCHS | meta::SWARM), _) => false,
+ // Never stored: named for capabilities only (`api::access::needed`).
+ (Some(meta::LOCAL), _) => false,
// Logging out: a user revokes its own tokens (`POST /auth/logout`); one who
// manages users, anyone's (`DELETE /admin/users/{name}/tokens`).
(Some(meta::LOGOUTS), Some(owner)) => {