jochen
6604d44372
After the controller stopped granting a mesh seat to claimants that do not hold it, an image built before the runtime followed its membership still subscribed the seat's subject, and the refusal ended the process: ace's postgres runtime crash-looped. A subject the grants leave out now costs that subject only, as an announcement's already did (issue 217).
11 lines
346 B
Plaintext
11 lines
346 B
Plaintext
# A bus that refuses one subject: what the mesh's grants do to a subject they do not name (issue 217).
|
|
authorization {
|
|
users = [
|
|
{ user: "runtime", password: "runtime", permissions: {
|
|
publish: { allow: [">"] }
|
|
subscribe: { allow: [">"], deny: ["$SRV.PING.>", "mesh.seat.held-elsewhere.>"] }
|
|
} }
|
|
]
|
|
}
|
|
jetstream: enabled
|