aboutsummaryrefslogtreecommitdiffstats
path: root/src/api/store.rs
diff options
context:
space:
mode:
Diffstat (limited to 'src/api/store.rs')
-rw-r--r--src/api/store.rs11
1 files changed, 8 insertions, 3 deletions
diff --git a/src/api/store.rs b/src/api/store.rs
index e43d129..00ced48 100644
--- a/src/api/store.rs
+++ b/src/api/store.rs
@@ -662,7 +662,8 @@ fn parse_key_path(key: &str) -> Result<Vec<String>, StatusCode> {
/// what every node acts on, so a write there acts on the whole swarm, and each is
/// logged. Epoch metadata (and `_continuum` as a whole, which contains it) is never
/// writable: the protocol reads it at the snapshot change, so an edit only misleads
-/// whoever reads it later; nor is the swarm ID. A path inside a list or text is
+/// whoever reads it later; nor is the swarm ID, nor `_continuum/local`, which names
+/// what a node holds alone for capabilities and is never stored. A path inside a list or text is
/// judged where the rules judge the write (`inspect::placed`): at the list.
async fn parse_write_path(
state: &AppState,
@@ -674,8 +675,12 @@ async fn parse_write_path(
let path = parse_key_path(key)?;
let placed = crate::document::inspect::placed(&state.doc.read().await.doc, &path);
let protocol = meta::is_protocol(&path);
- // `_continuum` itself, epoch metadata and the swarm ID: nobody.
- let fixed = protocol && (path.len() < 2 || path[1] == meta::EPOCHS || path[1] == meta::SWARM);
+ // `_continuum` itself, epoch metadata, the swarm ID and what is never stored: nobody.
+ let fixed = protocol
+ && (path.len() < 2
+ || path[1] == meta::EPOCHS
+ || path[1] == meta::SWARM
+ || path[1] == meta::LOCAL);
let allowed = match access {
Access::Everything => !protocol || state.protocol_writers.contains(&user.0),
Access::Caps(caps) => caps.allows(crate::access::Right::Write, &placed),