Skip to content

Authorize entry broadcast channel - #135

Merged
jasonvarga merged 1 commit into
masterfrom
fix/entry-channel-authorization
Nov 12, 2026
Merged

jasonvarga merged 1 commit into
masterfrom
fix/entry-channel-authorization

Conversation

@jasonvarga

Copy link
Copy Markdown
Member

The entry.{id}.{site} presence channel now only lets a user join if the entry exists, the site matches the entry's locale, and the user has access cp and can edit the entry (via EntryPolicy@edit, which also covers site access and other authors' entries).

Adds tests covering editors, super users, view-only users, users without CP or site access, missing entries, and mismatched sites. TestCase now uses PreventsSavingStacheItemsToDisk so tests don't write content into the repo.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@jasonvarga
jasonvarga merged commit afcbce6 into master Nov 12, 2026
16 checks passed
@jasonvarga
jasonvarga deleted the fix/entry-channel-authorization branch November 12, 2026 17:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant