From f44fbf5b93269bb3573e8a2701e70ab0d7613153 Mon Sep 17 00:00:00 2001 From: tv Date: Sat, 7 Nov 2026 22:35:21 +0100 Subject: access: the policy enforced _continuum/access/policy ({"version": 1}) has every node screen every change it receives, on every path changes come in. A policy a node doesn't know stops its writes through the API. GET /admin/refused. Auth plan M6. --- src/document/store.rs | 6 ++++++ src/document/sync.rs | 10 ++++++++++ 2 files changed, 16 insertions(+) (limited to 'src/document') diff --git a/src/document/store.rs b/src/document/store.rs index 31c4824..778307f 100644 --- a/src/document/store.rs +++ b/src/document/store.rs @@ -175,6 +175,12 @@ pub(crate) enum StoreError { /// (`Replica::writable`). #[error("the node is rejoining a newer epoch; writes are refused until it is done")] Rejoining, + /// The swarm's write protection policy is one this node doesn't know + /// (`access::policy`): no writes through the API until it is upgraded. + #[error( + "the swarm's policy (_continuum/access/policy) is one this node doesn't know ({0}); upgrade it to write" + )] + UnknownPolicy(String), #[error(transparent)] Doc(#[from] automerge::AutomergeError), #[error(transparent)] diff --git a/src/document/sync.rs b/src/document/sync.rs index 8cb740b..f124ee8 100644 --- a/src/document/sync.rs +++ b/src/document/sync.rs @@ -22,6 +22,16 @@ use crate::transport::SyncPayload; /// A sync message from a peer, decoded (`decode`), to apply (`SyncSession::receive`). pub(crate) struct Received(sync::Message); +impl Received { + /// The changes it carries, as their chunks, taken out of it: applied otherwise + /// (`access::screen`), what is left of it says what the peer has and needs. + pub(crate) fn take_changes(&mut self) -> Vec { + let bytes = self.0.changes.iter().flatten().copied().collect(); + self.0.changes = sync::ChunkList::empty(); + bytes + } +} + /// The changes none of the others depend on, sorted as heads are (`get_heads`). fn tips<'a>( changes: impl Iterator< -- cgit v1.3.1