1 files changed, 10 insertions, 1 deletions
diff --git a/src/api/store.rs b/src/api/store.rs
index 81d0046..16dd966 100644
--- a/src/api/store.rs
+++ b/src/api/store.rs
@@ -464,7 +464,16 @@ pub(crate) async fn put_store_entry(
         return Err(StatusCode::SERVICE_UNAVAILABLE.into());
     }
 
-    let path = parse_write_path(&state, &user, &access, &key, "PUT")?;
+    // A user's own entry, signed by it: its keys are its own to change, whatever else it
+    // may do (`envelope::check` takes nothing else changed).
+    let own_entry = media_type(&headers) == SIGNED
+        && parse_key_path(&key)
+            .is_ok_and(|path| path == crate::access::registry::user_path(&user.0));
+    let path = if own_entry {
+        crate::access::registry::user_path(&user.0)
+    } else {
+        parse_write_path(&state, &user, &access, &key, "PUT")?
+    };
     let sign = Sign::Write {
         path: path.clone(),
         asked: query.signed,