docs: Explain the root namespace #1241
Conversation
|
docs/pages/world/world-101.mdx
Outdated
| Currently, having write access only matters for systems interacting with tables: it means these systems can create and edit records within those tables. | ||
|
|
||
| Note that systems in the ROOT namespace are not subject to access control. | ||
| They can bypass any hooks and write directly to any table in the `World`. |
There was a problem hiding this comment.
dunno if it's worth clarifying - altough bypassing hooks is possible, it isn't supposed to happen and there're no tools for it. You'd have to manually make a version of StoreCore.setField without the hook calls and rewrite any table libs accordingly
There was a problem hiding this comment.
It's a security matter, so I think we should be as clear as possible about potential vulnerabilities.
There was a problem hiding this comment.
yeah ofc, I meant clarifying that you shouldn't expect this to normally happen, it's just a security nuance
There was a problem hiding this comment.
I clarified it would be bypassing security.
As requested by @ludns .