Skip to content

Commit 75bcef5

Browse files
committed
chore(changeset): state the refusals inline, as the ADR-0087 disposition reads them
Claude-Session: https://claude.ai/code/session_01MaH9HpfmNnJGzgWQPqNmhP Co-authored-by: Claude <noreply@anthropic.com>
1 parent 9abd3a1 commit 75bcef5

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎.changeset/24421-sharing-rule-declared-name-guard.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ Clause-②: no (narrowing)
1313

1414
ADR-0131 D6 charts declared sharing rules under regime C: a rule a package declares is read-only, it is customised by a clone under another name, and it is switched off through the deployment-level activation ledger (`sys_metadata_activation`), like flows, actions, positions and permission sets. Same-name shadowing is retired.
1515

16-
The narrowings, FROM → TO, each with its one-line fix:
16+
What is refused now:
1717

1818
- `POST /api/v1/sharing/rules` (and `SharingRuleService.defineRule`) creating a rule under a declared rule's name — FROM `201`, the new row replacing the declared rule in its scope, TO `409 RESOURCE_CONFLICT` naming the declared rule. Fix: create your rule under another name, and switch the declared one off with `POST /api/v1/security/_activation/sharing_rule/<name>` and `{ "enabled": false }`.
1919
- A `/data` insert of a `sys_sharing_rule` row under a declared rule's name, or an update that renames a row onto one — FROM `201` / `200`, TO `409 RESOURCE_CONFLICT`. Fix: the same.

0 commit comments

Comments
 (0)