Les OrchardandClaude Opus 4.8 cac3b2986a Grant users access to their own sync topic under deny-all ...

Manager.Authorize had no special case for a user's own sync topic, so with
auth-default-access=deny-all the per-account sync topic (st_...) fell through
to the default access and was denied. This broke web app account sync for
non-admin users: wss://.../st_<id>/ws returned 403. Admin-role users were
unaffected via the existing role bypass.

Allow a user full access to their own SyncTopic in Authorize. This fixes
existing users without a migration, since it needs no ACL row.

Fixes #733

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-17 11:58:29 -07:00

..

access_cache_test.go

Review

2026-05-31 21:25:53 -04:00

access_cache.go

Fix race and a small issue with the access cache

2026-06-03 21:01:52 -04:00

manager_postgres_schema.go

WIP: Email verification

2026-03-29 22:47:38 -04:00

manager_postgres.go

Further review

2026-05-31 15:42:12 -04:00

manager_sqlite_schema.go

WIP: Email verification

2026-03-29 22:47:38 -04:00

manager_sqlite.go

Fix ACL case sensitivity issues in sqlite

2026-06-04 10:28:33 -04:00

manager_test.go

Grant users access to their own sync topic under deny-all

2026-06-17 11:58:29 -07:00

manager.go

Grant users access to their own sync topic under deny-all

2026-06-17 11:58:29 -07:00

types_test.go

fix linting issue

2024-04-07 21:40:24 -06:00

types.go

Review

2026-05-31 21:25:53 -04:00

util_test.go

Tests for user package

2026-02-16 20:49:17 -05:00

util.go

Extract ExecTx

2026-03-02 19:45:35 -05:00