A refused tool subscription is said, never fatal (novox/hq issue 218)

After the controller stopped granting a mesh seat to claimants that do not hold it, an image built before the runtime followed its membership still subscribed the seat's subject, and the refusal ended the process: ace's postgres runtime crash-looped. A subject the grants leave out now costs that subject only, as an announcement's already did (issue 217).
2026-10-04 00:13:15 +02:00
parent 7b21440962
commit 6604d44372
3 changed files with 52 additions and 11 deletions
@@ -3,7 +3,7 @@ authorization {
  users = [
    { user: "runtime", password: "runtime", permissions: {
        publish: { allow: [">"] }
-        subscribe: { allow: [">"], deny: ["$SRV.PING.>"] }
+        subscribe: { allow: [">"], deny: ["$SRV.PING.>", "mesh.seat.held-elsewhere.>"] }
    } }
  ]
 }