diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/MESHBAY_DESIGN.md | 8 | ||||
| -rw-r--r-- | docs/USERGUIDE.md | 9 |
2 files changed, 17 insertions, 0 deletions
diff --git a/docs/MESHBAY_DESIGN.md b/docs/MESHBAY_DESIGN.md index b9fdbdc..555d0f1 100644 --- a/docs/MESHBAY_DESIGN.md +++ b/docs/MESHBAY_DESIGN.md @@ -383,6 +383,14 @@ Four properties, each load-bearing: rotation propagates by itself and revocation actually takes effect. (Rotating the key after a revocation is still required — the ex-member holds the current one, and no protocol can take that back.) +5. **Revoking somebody cancels the code they have not redeemed yet**, for that + group and no other. There is no membership until a code is consumed, so an + invitation sent to the wrong person is the whole of their access, and a + removal that left it usable would be a removal in name only. It is also the + case removal is asked for most: an invitation is undone before it is + accepted, not after. Nothing to rotate then — they never held the key, and + `member_revoke` says so by returning no reminder rather than by leaving the + caller to work it out. Node authority is established the same way, once per node: `meshbay-node operator pair` prints a code, the operator types it into their own browser, and the node diff --git a/docs/USERGUIDE.md b/docs/USERGUIDE.md index 9f7cea7..4d87aef 100644 --- a/docs/USERGUIDE.md +++ b/docs/USERGUIDE.md @@ -570,6 +570,15 @@ keeps the old one, which opens nothing written from now on. Anything they already downloaded stays theirs. Once a file has been copied, no software can reach back and take it away. +Or the group's **Members** tab, from a paired browser: *Remove*. It does both +halves — the node stops serving them, and the hub stops letting them reach it. + +**Somebody you invited by mistake** is removed the same way, from either, and +it also cancels the code you sent them: until it is redeemed there is no +membership yet, only an invitation, and taking one back has to take back the +other. Nothing to rotate in that case — they never had the key, and neither +the command nor the interface will tell you to. + If you mistype the username, `member revoke` says so rather than quietly doing nothing. |