openvibers/openvibe.network Commits

Network: Host may read Sources items (the hosting catalog) (#148)

OP OpenVibers committed 11 Oct 2026 · 69090c5ed9 · 1 file, +2 −0

Grants the `host` principal `sources.item.read` (audience openvibe.sources), so Host's new hosting catalog (Host#69, plan T20 step 3) can read OpenVibe.Sources items in category `hosting` (Sources#34 seeds Linode's plan types).

Tests: principals, grants-admin, mod-principals pass. (An earlier run of every principals-dependent file timed out together while the machine's load average was over 100; rerun on its own, green.)

Changes

ddiff --git a/server/identity/principals.js b/server/identity/principals.js
iindex 60a72043..0e1c6074 100644
---- a/server/identity/principals.js
++++ b/server/identity/principals.js
@@@ -191,6 +191,8 @@ const DEFAULT_GRANTS = [
      ['coupons', 'events.subscription.manage', 'openvibe.events', []],
      ['coupons', 'sources.item.read', 'openvibe.sources', []],
      ['host', 'events.event.publish', 'openvibe.events', []],
++    // The hosting catalog (plan T20 step 3) reads OpenVibe.Sources items in category hosting (Host#69).
++    ['host', 'sources.item.read', 'openvibe.sources', []],
      // ADR-030 (WS-E task 4): Live rebuilds its follows projection from Network's graph.
      ['live', 'network.follows.read', SELF_AUDIENCE, []],
      ['live', 'network.follows.write', SELF_AUDIENCE, []],