Skip to content

docs: tightening external sharing narrows pastes already shared - #76

Merged
darwin67 merged 1 commit into
mainfrom
docs/sharing-tightening
Oct 11, 2026
Merged

darwin67 merged 1 commit into
mainfrom
docs/sharing-tightening

Conversation

@darwin67

Copy link
Copy Markdown
Member

Summary

This settles the doc-vs-code mismatch flagged in #74.

docs/design.md said that tightening "Sharing outside the team" never changes pastes already shared. The code does the opposite at two layers:

  • On save: Organizations.clamp_paste_audiences/1 rewrites existing audiences to fit the new setting.
  • On every read: shared-link access re-checks the workspace's current setting.

The code's behaviour is the one to keep:

  • An owner who switches to "Members only", for example after a leak, needs links already shared to stop working.
  • Because the clamp rewrites stored audiences, loosening the setting later doesn't quietly re-share anything.

The doc now describes that behaviour. The UI has said the same since #74.

Doc-only change. No code changes.

🤖 Generated with Claude Code

https://claude.ai/code/session_019fnjMN7WpEjQJD2zveakV6


Generated by Claude Code

The design doc promised that tightening "Sharing outside the team" never
changes pastes already shared. The code has always done the opposite, and
#74 put the code's behaviour into the interface:

- On save, Organizations.clamp_paste_audiences/1 rewrites existing
  audiences to fit the new setting.
- On every read, shared access re-checks the workspace's current setting.

That is the behaviour an owner needs when shutting off outside access
after a leak, and because the clamp rewrites stored audiences, loosening
the setting later does not quietly re-share anything. Update the doc to
describe it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019fnjMN7WpEjQJD2zveakV6
@github-actions github-actions Bot added the docs label Oct 11, 2026
@darwin67

darwin67 commented Oct 11, 2026 •

Copy link
Copy Markdown
Member Author

Oracle review complete: signed off, no blockers. The design wording matches both current audience clamping on policy save and current-policy checks on shared reads. Loosening does not widen stored audiences or silently re-share pastes. This is documentation-only; no correction was needed. Review session: https://ampcode.com/threads/T-01a12594-e2f1-75be-b343-9239564f5c84

CI is green at the reviewed head. For PR78 this includes the fresh post-fix memory/local/S3 test matrix, Rust tests, formatting/linting, and production-container build; release/publication jobs skipped as expected.

@darwin67
darwin67 marked this pull request as ready for review October 11, 2026 13:58
@darwin67
darwin67 merged commit 1307143 into main Oct 11, 2026
17 checks passed
@darwin67
darwin67 deleted the docs/sharing-tightening branch October 11, 2026 13:58
@chaba2-bot chaba2-bot Bot mentioned this pull request Oct 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants