# Close two holes in the edit-access guard · dara/icarus

[View on GitCafe](https://git.cafe/dara/icarus/commit/0cfefbc0247d840b30332a0fc19de9f78a5b0541)

Repository: [dara/icarus](https://git.cafe/dara/icarus)

Visibility: public

Requested revision: 0cfefbc0247d840b30332a0fc19de9f78a5b0541

Requested commit: 0cfefbc0247d840b30332a0fc19de9f78a5b0541

Commit: 0cfefbc0247d840b30332a0fc19de9f78a5b0541

Tree: 01d142e9845377d8fcfb2421aa6929db076b1813

Author: Dara Adedeji

Committer: Dara Adedeji

## Message

```
Close two holes in the edit-access guard

An image added to a cloud strategy was checked for edit access before
its upload was staged, not after. A demotion during that durable write
let the image and its undo step be committed anyway, though its
placement would never be saved. addImage now checks again once the
upload is staged; when refused, it drops the staged upload and its bytes
(CloudMediaUploadQueueNotifier.discardStagedUpload) and places nothing.

A batch refused with FORBIDDEN was confirmed as lost edit access by a
shell read made with whatever session was signed in. After switching
from account A to B, A's batch refused for its account binding, then
B's refused read, paused A's work with "You no longer have edit access"
although A still had it. The confirmation now counts only when it reads
as the batch's own account and the session is unchanged when it
answers; otherwise the batch takes the old retry path.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

```

## Parents

- [7368576ef74592607ab317e07a3c0dbe91f9a540](https://git.cafe/dara/icarus/commit/7368576ef74592607ab317e07a3c0dbe91f9a540?format=markdown)

[Source at this commit](https://git.cafe/dara/icarus/tree/0cfefbc0247d840b30332a0fc19de9f78a5b0541?format=markdown)