inbuxa/inbuxa-server
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 23 Wiki Activity

Delegates reach the whole locked account #68

Merged
jcoffey-dev merged 2 commits from fix/delegate-whole-account into main 2026-09-28 01:22:48 +00:00
Conversation 0 Commits 2 Files Changed 4
+92 -7
2 Commits
Author SHA1 Message Date
jcoffey-dev 9f6761c9dd Writing delegates may add at the top of a locked account's Files
ci / fork-checks (pull_request) Successful in 17s
Details
ci / build (pull_request) Successful in 17m56s
Details 
A shared account refuses top-level folders, so an organize or full
delegate couldn't add anything to a locked account with no folders. A
delegate who may write now can, as the owner could; the reconcile after
the create grants it the new folder. Read delegates still can't (AL-6,
AL-7).
 2026-09-27 18:04:24 -07:00
jcoffey-dev d4d127fa7d Delegates reach the whole locked account
ci / build (pull_request) Canceled after 5m27s
Details
ci / fork-checks (pull_request) Successful in 14s
Details 
A delegate's token listed the locked account only for kinds of data it
held grants on, so one with no files (or no calendar) was refused to the
delegate outright: "You do not have access to account". The token now
lists the locked account for mail, calendars, contacts and files alike,
so an empty kind reads as empty. What the delegate may see or change is
still each container's grant (AL-7).
 2026-09-27 17:58:50 -07:00