[Imported from Trac: page AccountingDesign, version 6]

warner 2008-06-30 22:40:52 +00:00
parent f9f7061b5c
commit 164ec4d359

@ -157,17 +157,14 @@ the most important is a pubkey identifier that indicates to whom this
authority is being delegated. The fields we'll define for v1 are: authority is being delegated. The fields we'll define for v1 are:
* delegate-pubkey: (string) a pubkey identifier. The holder of the * delegate-pubkey: (string) a pubkey identifier. The holder of the
corresponding private key is hereby authorized to use the corresponding private key is hereby authorized to use the authority of the
authority of the signer, as attenuated by the remainder signer, as attenuated by the remainder of the fields in this certificate.
of the fields in this certificate. * signer-gets-lease: (bool) if True, the signer of this certificate will be
* signer-gets-lease: (bool) if True, the signer of this certificate will given a lease on the resulting shares. A privkey authorized by this chain
be given a lease on the resulting shares. A privkey will have control over a single full column of the lease table (all leases
authorized by this chain will have control over a labeled with the signer's pubkey). In a full request chain (which contains
single full column of the lease table (all leases a signed operation as well as the certificate chain), there must be
labeled with the signer's pubkey). In a full request exactly one True signer-gets-lease field, to make sure that there is
chain (which contains a signed operation as well as the exactly one lease on the resulting share.
certificate chain), there must be exactly one True
signer-gets-lease field, to make sure that there is
exactly one lease on the resulting share.
* other attenuations: TBD (things like until=, SI=, UEBhash=, operation=, * other attenuations: TBD (things like until=, SI=, UEBhash=, operation=,
max-size=) max-size=)