From 82822160443d78cf8ec6ca2053b1a5fec95dd0bf Mon Sep 17 00:00:00 2001 From: dev9-bb Date: Sun, 25 Oct 2026 15:12:13 +0800 Subject: [PATCH] docs(acl): describe the two-phase native ACL check #42 moved native commit authorization into a pre-lock preflight and keeps only the ACL row/revision proof inside Branch(master). Update the NativeACLCheck docstring, which still claimed the Hub decision runs under the Branch lock at final commit. Comment-only change; no behaviour change. Refs eaopen/cloudfile-server#43 --- cloudfile_ext/v2/acl_http.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/cloudfile_ext/v2/acl_http.py b/cloudfile_ext/v2/acl_http.py index 763773ca580..7f23814fe41 100644 --- a/cloudfile_ext/v2/acl_http.py +++ b/cloudfile_ext/v2/acl_http.py @@ -391,7 +391,9 @@ class NativeACLCheck(APIView): """Existing native internal JWT, trusted username, bounded exact paths. This is a permission check, never a bearer grant. Native code invokes it - anew at reads and under Branch(master) at final commit. + anew at reads and once in a pre-lock preflight for writes; the final + Branch(master) transaction only re-reads the bounded ACL row/revision + proof, so no Hub HTTP runs while the Branch row is locked. """ authentication_classes = () permission_classes = (AllowAny,)