Les Orchard and Claude Opus 4.8
cac3b2986a
Grant users access to their own sync topic under deny-all
...
Manager.Authorize had no special case for a user's own sync topic, so with
auth-default-access=deny-all the per-account sync topic (st_...) fell through
to the default access and was denied. This broke web app account sync for
non-admin users: wss://.../st_<id>/ws returned 403. Admin-role users were
unaffected via the existing role bypass.
Allow a user full access to their own SyncTopic in Authorize. This fixes
existing users without a migration, since it needs no ACL row.
Fixes #733
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-17 11:58:29 -07:00
binwiederhier
ddb878d985
Fix ACL case sensitivity issues in sqlite
2026-06-04 10:28:33 -04:00
binwiederhier
b4cb1bb7fb
Fix race and a small issue with the access cache
2026-06-03 21:01:52 -04:00
binwiederhier
3e81620dac
Bump
2026-06-03 20:38:19 -04:00
binwiederhier
869f005136
Review
2026-06-01 21:15:43 -04:00
binwiederhier
d2507dbeed
Again: Manual review
2026-06-01 21:09:56 -04:00
binwiederhier
ae27172f8d
Add trace logs
2026-06-01 20:30:05 -04:00
binwiederhier
e18329a17e
Log changes
2026-06-01 14:08:33 -04:00
binwiederhier
104182a8be
Log reload
2026-06-01 12:47:21 -04:00
binwiederhier
4196e6444c
Stringbuilder
2026-05-31 21:31:23 -04:00
binwiederhier
a2dc290f31
Review
2026-05-31 21:25:53 -04:00
binwiederhier
0e2c459d6b
Further review
2026-05-31 15:42:12 -04:00
binwiederhier
2f4afbdae5
Manual refinements
2026-05-31 15:26:28 -04:00
binwiederhier
204723f3c0
Make opt-in flag
2026-05-31 14:28:04 -04:00
binwiederhier
301be79f0a
Per-user reload
2026-05-31 14:11:55 -04:00
binwiederhier
03d405ed80
Rename acl cahce
2026-05-31 11:42:54 -04:00
binwiederhier
4b87a27326
Docblock, more tests
2026-05-31 11:22:30 -04:00
binwiederhier
d987796243
Rename
2026-05-31 11:08:30 -04:00
binwiederhier
c841caa3b3
Review, rename to pattern
2026-05-31 11:05:27 -04:00
binwiederhier
6310e3a96f
Replace atomic.Pointer for readbility
2026-05-31 10:45:10 -04:00
binwiederhier
25520c4505
WIP: Access cache
2026-05-28 17:13:14 -04:00
binwiederhier
51da5e0f77
Review
2026-03-30 16:33:19 -04:00
binwiederhier
63ec73a319
Tests
2026-03-30 12:21:19 -04:00
binwiederhier
61dd788dac
WIP: Email verification
2026-03-29 22:47:38 -04:00
binwiederhier
3d9ce69042
PG races
2026-03-16 15:48:36 -04:00
binwiederhier
59ce581ba2
Fix postgres primary/replica races
2026-03-16 11:21:21 -04:00
binwiederhier
6b38acb23a
Route authorization query to read-only database replica to reduce primary database load
2026-03-15 22:01:19 -04:00
binwiederhier
8a34dfe3f8
Move things, rename things
2026-03-12 21:17:30 -04:00
binwiederhier
85bdfc61ce
Refine, log unhealthy replica
2026-03-11 21:07:58 -04:00
binwiederhier
ac65df1e83
Move auth queries to primary, redo health check loop
2026-03-11 20:26:29 -04:00
binwiederhier
ab33ac7ae5
Refine
2026-03-11 11:58:40 -04:00
binwiederhier
f1865749d7
WIP: Postgres read-only replica
2026-03-10 22:17:40 -04:00
binwiederhier
0d4b1b00e6
Users() optimization to help with startup time
2026-03-06 14:46:53 -05:00
binwiederhier
33b19814c7
Transactions
2026-03-03 14:42:36 -05:00
binwiederhier
c4b8cfa756
Manual correction
2026-03-02 20:04:03 -05:00
binwiederhier
8afeb813d9
Move OpenPostgres
2026-03-02 19:52:36 -05:00
binwiederhier
ea4739f79b
Extract ExecTx
2026-03-02 19:45:35 -05:00
binwiederhier
11c79a6369
Refine again
2026-03-01 14:24:06 -05:00
binwiederhier
039566bcaf
REmove unused
2026-03-01 11:59:24 -05:00
binwiederhier
544ce112b5
Manual review
2026-03-01 11:44:22 -05:00
binwiederhier
c19377109e
Small refinements
2026-02-28 21:15:51 -05:00
binwiederhier
ccbd02331c
Re-add execTx
2026-02-28 19:49:01 -05:00
binwiederhier
542aa403d2
Re-order functions
2026-02-28 19:34:09 -05:00
binwiederhier
ebb48e217d
Merge user store and manager
2026-02-28 17:35:35 -05:00
binwiederhier
7710ace184
Self-review
2026-02-28 16:13:58 -05:00
binwiederhier
5c26e70fe7
Manual review: Make resetUserAccessTx
2026-02-26 17:34:19 -05:00
binwiederhier
c66fa92341
Re-add tx integrity
2026-02-26 16:54:56 -05:00
binwiederhier
28a436c0d2
Optimizations
2026-02-23 14:11:36 -05:00
binwiederhier
b02366b42b
Make more consistent
2026-02-23 13:49:54 -05:00
binwiederhier
811c7ae25a
TX fixes
2026-02-22 20:39:41 -05:00