fix(wac): require Control on protected resource for POST-created .acl/.meta sidecars - #580

Merged

melvincarvalho merged 5 commits into

JavaScriptSolidServer:gh-pagesfrom

jjohare:security/post-acl-sidecar-injection

Jul 3, 2026

Commits on Jul 3, 2026

fix(wac): require Control on protected resource for POST-created .acl/.meta sidecars
jjohare
committed
fbe9b77
test(wac): regression for POST-created .acl/.meta sidecar injection
melvincarvalho
committed
5eeed9e
fix(wac): use buildResourceUrl for sidecar Control check; clarify .meta rationale
melvincarvalho
committed
7deed84
fix(wac): don't debit ledger in the secondary sidecar Control check
melvincarvalho
committed
cfdf385
docs(wac): document full checkAccess() return shape
melvincarvalho
committed
aab92cd