prove-a-read-only-credential-cannot-write

The procedure as a graph, on its own page — zoom it, print it, send somebody the address. Back to the record for the steps, the trust panel and the provenance.

Procedure

The same procedure, read in order

  1. start start. Goes next to s1
  2. check The role holds no administrative membership. Goes on_fail to s11; next to s2
  3. check It can read what it is meant to read. Goes on_fail to s11; next to s3
  4. check The write privilege is absent, asked directly. Goes on_fail to s11; next to s4
  5. check And a write attempt is actually refused. Goes on_fail to s5; next to s6
  6. wait Fix the probe, then attempt the write again. Goes retry to s4; next to s11
  7. check A private table is out of reach. Goes on_fail to s11; next to s7
  8. check The grant list is the one that was intended. Goes on_fail to s11; next to s8
  9. decision Is there a pooler in front of this database?. Goes if pooled to s9; if default to s10
  10. check The same refusal holds through the pooler. Goes on_fail to s11; next to s10
  11. check The second line of defence is in force here. Goes on_fail to s11; next to __end_success
  12. escalate Escalate before the credential is used. Terminal
  13. end success. Terminal