| Comment: | caps phase 5b: the capability matrix as executable spec
Each row driven twice — the letter alone must open its surface, and every OTHER letter together must not. Router resolves the repo from the request body for ops that carry it as a field (repos/update). |
|---|---|
| Timelines: | family | ancestors | descendants | both | fossil-caps |
| Files: | files | file ages | folders |
| SHA3-256: |
3df10d7f783a208ded7ed4e070e9e7ff |
| User & Date: | dmestas on 2026-08-22 16:28:23.588 |
| Other Links: | branch diff | manifest | tags |
|
2026-08-22
| ||
| 16:32 |
caps phase 5c: capability editor in settings
Per-repo category strings and per-account caps, editable in place with the expanded effective set shown beside each. CapsAdmin is an optional seam — a forge without it simply has no editor. closed check-in: b1e46974fc user: dmestas tags: fossil-caps | |
| 16:28 |
caps phase 5b: the capability matrix as executable spec
Each row driven twice — the letter alone must open its surface, and every OTHER letter together must not. Router resolves the repo from the request body for ops that carry it as a field (repos/update). check-in: 3df10d7f78 user: dmestas tags: fossil-caps | |
| 16:23 |
caps phase 5a: web write paths gate on capabilities
gateCap on every forum/wiki/ticket/technote/chat POST; caps plane separated from sessions (WithCaps) so enforcement doesn't imply a login page; an ungated forge stays ungated. Harness proves category caps reach surfaces and that removing a letter closes the same request. check-in: 54cc5168ca user: dmestas tags: fossil-caps | |