Skip to content

docs: clone endpoint, required-FK delete, Field.time, owner-scoped writes - #2012

Merged
os-zhuang merged 1 commit into
mainfrom
docs/clone-deletebehavior-time-security
Jun 17, 2026
Merged

os-zhuang merged 1 commit into
mainfrom
docs/clone-deletebehavior-time-security

Conversation

@os-zhuang

Copy link
Copy Markdown
Contributor

Targeted hand-written-doc updates so the docs match the runtime behavior shipped this cycle (clone, delete-cascade, time validation, owner-scoped member writes).

Doc Update
guides/api-reference.mdx + concepts/implementation-status.mdx Document POST /data/:object/:id/clone — gated by enable.clone (403 CLONE_DISABLED when off), optional { overrides }, 201 { object, id, sourceId, record }. (enable.clone was already listed as a capability but had no runtime/endpoint until #1961.)
protocol/objectql/types.mdx deleteBehavior: a required lookup FK escalates a defaulted set_null to restrict → 409 DELETE_RESTRICTED (with dependentObject/dependentCount), instead of a misleading "<field> is required" error (#1984). Field.time accepts HH:MM/HH:MM:SS and is validated as a time-of-day, not a date (#2004).
guides/security.mdx member_default writes are owner-scoped (created_by) and now actually enforced on by-id update/delete via a pre-image authorization check — a member can't modify another user's record (403); modifyAllRecords/admin bypass; audit-opt-out objects fail closed (#1994).

Docs-only; no package version impact.

🤖 Generated with Claude Code

…ites

Reflect runtime behavior shipped this cycle in the hand-written docs:
- api-reference + implementation-status: POST /data/:object/:id/clone (gated by
  enable.clone; overrides; 201 {object,id,sourceId,record}).
- protocol/objectql/types: a required lookup FK escalates a defaulted set_null to
  restrict → 409 DELETE_RESTRICTED; Field.time accepts HH:MM/HH:MM:SS.
- guides/security: member_default writes are owner-scoped (created_by) and now
  enforced on by-id update/delete via a pre-image authorization check; admins /
  modifyAllRecords bypass; audit-opt-out objects fail closed.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@vercel

vercel Bot commented Jun 17, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
spec Ready Ready Preview, Comment Jun 17, 2026 7:15am

Request Review

This branch was successfully deployed

1 active deployment
Preview — 8d57ec55 Deployed Jun 17, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation size/s tooling

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant