From 47c3c7842f6c31af18cfaa2d84ada5dc83b9831b Mon Sep 17 00:00:00 2001 From: tv Date: Sun, 8 Nov 2026 09:33:41 +0000 Subject: access: judged by the policy written under The rules read the policy at the change's dependencies only for strict mode, so history from before the policy was judged by today's rules when a late node caught up, or when REFUSALS had it judged again. A change written while the document had no policy, or one this node doesn't know, is now judged by none. Review finding 6. --- docs/access.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'docs/access.md') diff --git a/docs/access.md b/docs/access.md index 8443394..f1ed1c3 100644 --- a/docs/access.md +++ b/docs/access.md @@ -215,7 +215,9 @@ curl -X PUT localhost:3000/store/_continuum/access/policy \ A change is judged by what it touches, by the node that committed it, and by the user it names, as the document stood when it was written (at its dependencies): a -revocation since refuses nothing it allowed then, and every node judges alike. +revocation since refuses nothing it allowed then, and every node judges alike. One +written before the policy (at its dependencies) is judged by none: history from before +stays as it is, wherever it comes from later (a joining node catching up, say). * A member's entry (`_continuum/members/`) and its votes are written by that member only; removing an entry, also by a user who may write there. -- cgit v1.3.1