From 3d7230d952aa4a71a1aeb64fee9841d16b70ed91 Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Sat, 7 Nov 2026 22:35:21 +0100
Subject: access: signatures required

"signatures": "required": a change counts only once a signature by its
committer vouches for it, and waits until then; every node then signs
every change it makes.

Auth plan M6.
---
 src/state/mod.rs | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'src/state/mod.rs')

diff --git a/src/state/mod.rs b/src/state/mod.rs
index 049c9e6..294b446 100644
--- a/src/state/mod.rs
+++ b/src/state/mod.rs
@@ -542,7 +542,10 @@ impl AppState {
                     if after != before
                         && let [hash] = after[..]
                     {
-                        if state.sign_every == SignEvery::Change || sign.wanted(&replica.doc) {
+                        if state.sign_every == SignEvery::Change
+                            || sign.wanted(&replica.doc)
+                            || crate::access::policy::of(&replica.doc).required()
+                        {
                             let replica = &mut *replica;
                             replica.signatures.sign(&replica.doc, hash, key);
                         } else {
-- 
cgit v1.3.1