Skip to content

It's possible to specify contradictory caveats #250

@jeffsmale90

Description

@jeffsmale90

Presently when using a CaveatBuilder or the declaratory Caveats interface in createDelegation, it's possible to specify caveats that are contradictory - for instance timestamp caveats that specify non-overlapping valid periods.

It could be useful for a caller to receive some sort of feedback about contradictory caveats. This could be:

  • validateCaveats utility function
  • error thrown from CaveatBuilder.build() or createDelegation

It could be helpful to parse the parent delegations if they exist (although if the parent delegation is a non-leaf, then it's less useful, and might provide a false sense of security).

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions