aboutsummaryrefslogtreecommitdiffstats
path: root/src/document/inspect.rs
Commit message (Collapse)AuthorAgeFilesLines
* store: a write inside a list checked where the rules judge ittv3 days1-0/+67
| | | | | | | | | | | | | | Review 2, N9: the API checked a write's capability on the path asked (servers/list/3/name), the rules on the list it is in (servers/list): a user whose capability lay inside a list had every such write pass the API and refused by the node's own judgement (403, after rolling the document back). inspect::placed places a write's path in the document by the rule the inspector places operations by (Place::child: cut after the first list or text on the way), and the store's writes check capabilities there. One rule for both; a test checks placed against the paths the inspector finds in the change such a write makes.
* access: signed values judged on receipttv3 days1-8/+89
| | | | | | | | | Inspection gives each operation's kind; under strict every node refuses, at a signed place, anything but an envelope that checks and replaces the one there (deleting first as replacing does), anything within one, and above one anything replacing what holds one. Auth plan M7.
* docs: what is left of write protectiontv3 days1-1/+1
| | | | future-work brought up to date with M6.
* inspect: the paths changes touchtv3 days1-0/+263
document::inspect: each change's paths read from its operations before it is applied, the same on every node: an object's place as made, cut at lists and text; unknown objects at the root. Auth plan M6.