From 63c2272a4feb890277ed1362b48a3524d0b07165 Mon Sep 17 00:00:00 2001 From: tv Date: Sun, 8 Nov 2026 16:15:39 +0000 Subject: users: a user can't remove its own last key A user managing its own keys (1168) could remove the last, and then neither sign nor log in by key. It can't now: DELETE /auth/keys/{id} of the last answers 409, the rules take a user's change of its own keys only with one left after it, and under a strict policy its own entry signed only with one key at least. One who may manage users still may. --- docs/access.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'docs') diff --git a/docs/access.md b/docs/access.md index a8dfed4..5941bdb 100644 --- a/docs/access.md +++ b/docs/access.md @@ -36,7 +36,8 @@ password hashes: every member reads the document). with the line, `DELETE /auth/keys/`; under a strict policy, by signing its entry with only its keys changed (`continuum-signed key-add laptop ~/.ssh/id_ed25519.pub`, `key-remove laptop`), with a key it holds already. Every - node takes that from the user itself, as from one who may manage users. + node takes that from the user itself, as from one who may manage users, but never + its last key removed (`409`): one who may manage users may. ## A new swarm -- cgit v1.3.1