gardencmp
Authenticated sync
- for client peers, ask for account ID and consider their role in groups of covalues they want to sync, deciding
- whether to return anything at all
- only some sessions (for writer-only)
- everything
We chatted about this a bit in Discord but I feel like could be pretty important to controlling spend when using Jazz Cloud.
My main use case is controlling tenant/customer usage - paying for hosting/Jazz Cloud without limiting what users are doing seems counterintuitive, both from an abuse (bad actor points their own client at my server and uses me as free hosting for their own Jazz app) and SaaS (i want to charge customers based on some metric) angle.
If sync could, for instance, ensure that a metadata CoValue is updated on sync and also reject sync operations that go past some kind of limit, that would be cool. Similarly enforcing that my (the app developer's) User has some level of access to certain CoValues that contain those statistics/metadata.
