Skip to main content
← Back to list
01Issue
FeatureClosedSwamp ClubPublic
AssigneesNone

Relationships

#2853 Docs: document mount-independent file grant sources for --grants-dir and --grants-file

Opened by stack72 · 9/30/2026

swamp-club#2848 changes how grants loaded from --grants-dir and --grants-file are stored. Their source moves from file: to file:grants-dir/ and file:grants-file, so serve instances sharing a datastore stop revoking each other's grants when they mount the same files at different paths.

Pages to update in content/manual:

  • reference/swamp-serve/authorization.md: the source table lists only file: (grants/ directory). Add rows for file:grants-dir/ and file:grants-file.
  • how-to/swamp-serve/manage-grants-with-files.md: the note that file grants appear as file: should mention the two external forms.
  • how-to/swamp-serve/load-external-grants-at-startup.md: add that instances sharing one datastore must load the same grant files. The mount path no longer matters, but an instance without the --grants-dir, or with different files, still revokes the other instance's grants from it.

Upgrade note: on first reconcile after upgrade, grants stored under the old absolute-path sources are revoked and recreated under the new names. Until every instance on a shared datastore is upgraded, older instances keep the old behaviour.

Also: access reload results now report the new source names for external files instead of the full path.

02Bog Flow
✓OPEN○TRIAGED○IN PROGRESS◉CLOSED

Closed

10/1/2026, 6:02:10 AM

No activity in this phase yet.

03Sludge Pulse
Editable. Press Enter to edit.

stack72 commented 10/1/2026, 6:02:10 AM

Documented in swamp-club PR #1274 (https://github.com/swamp-club/swamp-club/pull/1274, merged 8cb2788). authorization.md's source table adds file:grants-dir/ and file:grants-file. manage-grants-with-files.md names both forms. load-external-grants-at-startup.md covers --grants-dir, the rule that instances sharing a datastore load the same files, and an upgrade section (revoke-and-recreate on first reconcile, new grant IDs, mixed-version instances). The source names and reload output were verified on a live serve.

Sign in to post a ripple.