Reported by @morluto in #45.
Shared SOUL writes rely on the caller passing an allowSharedScope flag, so the owning write path has no independent check of current scope-management policy. updateSoul should require current management access for channel/group scopes itself (personal-scope writes unaffected).
Reported by @morluto in #45.
Shared SOUL writes rely on the caller passing an
allowSharedScopeflag, so the owning write path has no independent check of current scope-management policy.updateSoulshould require current management access for channel/group scopes itself (personal-scope writes unaffected).