From 41657a4d749b1f1d44663ff6504f2e784f091537 Mon Sep 17 00:00:00 2001 From: tv Date: Sat, 7 Nov 2026 22:35:21 +0100 Subject: access: strict policy, signed paths "values": "signed" (strict, requiring signatures too): the registry, _continuum/access, bans and the paths in _continuum/access/userSigned (* for any key) hold values their users signed. Envelopes read as the values they hold where the node reads protocol data. Auth plan M7. --- src/access/registry.rs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'src/access/registry.rs') diff --git a/src/access/registry.rs b/src/access/registry.rs index caa263d..618402b 100644 --- a/src/access/registry.rs +++ b/src/access/registry.rs @@ -128,10 +128,10 @@ impl User { /// The entry of user `name`, if it has one. pub(crate) fn user(doc: &impl ReadDoc, name: &str) -> Option { - let value = store::read_path(doc, &user_path(name)).ok()??; + let value = store::read_plain(doc, &user_path(name)).ok()??; let mut user = value.is_object().then(|| User::from_json(&value))?; // A damaged one revokes every token. - user.tokens_not_before = match store::read_path(doc, &logouts_path(name)) { + user.tokens_not_before = match store::read_plain(doc, &logouts_path(name)) { Ok(None) => 0, Ok(Some(at)) => at.as_u64().unwrap_or(u64::MAX), Err(_) => u64::MAX, -- cgit v1.3.1