| Ticket Hash: | 2c80534a01fc5eca8e3c21516f18c2cf9685c11a | ||
| Title: | Replace send_runs with one tool that changes any capability letter | ||
| Status: | Open | Type: | Code_Defect |
| Severity: | Normal | Priority: | Medium |
| Subsystem: | logins | Resolution: | |
| Last Modified: |
2026-11-02 04:44:18 9.1 days ago |
Created: |
2026-11-02 04:42:14 9.1 days ago |
| Version Found In: | |||
| Description: | ||||
|
The maintainer, 2026-11-01 Eastern, asking for a link to give a run user Write Wiki, expected a capabilities tool; told that only send_runs exists, for R alone: "Then `send_runs` is stupid." Wanted: one tool, on the OCX page by one press on a link naming the user and the letters, and at the server's command line, adding or taking away any letter but a, s, u and v, leaving the others as they are, as send_runs does for R. It replaces send_runs, whose name was still marked NEW TERM. Its name needs the maintainer's approval.
The maintainer asked whether capabilities set on an invite are one-time; they need not be. By reading (not run): approve on a login it made sets its letters, and keeps its password when the link carries the same key (src/ocx/commands/logins.cr, ApproveLogin). The key is the SHA-256 of the login's code, which the server keeps, so the code itself is not needed. So the smaller change may be for approve to change an approved login's letters without asking for the key again, with send_runs removed. A login approve did not make would still need Fossil's Users page. | ||||