On Tue, Oct 25, 2022, 12:35 AM David Hart <daveh...@gmail.com> wrote:
> > > On Mon, Oct 24, 2022, 6:39 PM Edward McGuire <met...@gmail.com> wrote: > >> Without checking the source, I presume this is because access control is >> enforced only at association creation time. >> > > That is correct. > I think I oversimplified there a bit. I suspect what is happening is the restrictions do not apply to upstream servers or which the client maintains an association. They are applied for downstream. Client requests where there is no existing association. Dave >
