Access changes
An agent changes who can do what. Reader and administrator are not the same action.
- Access proposed
- Role changed
- New approval needed
- Recorded
What goes wrong
- A request for read access quietly becomes administrator rights.
How Delegrity holds it
- The role is part of the fingerprint, so changing it makes a new action.
- A person approves the exact subject, role and system.
- Revoking the mandate stops an approved change that hasn't run.
Rules tested. No real identity system connected yet.