Lesson 1: Who may call the notes server, and how it checks
24 min read·13 Oct 2026
Module 7 · Lesson 1 · About 45 minutes · Needs: Module 5 Lesson 1 (the packaged server,build_server,main()) and Module 2 Lesson 3 (Streamable HTTP on localhost)
The situation
Monday 28 September 2026, week 4. Priya and Tomas want to search Nare's notes from their own computers, so the notes server must listen on the lab network over HTTP. Today anyone who can reach that port can read every note and write new ones. Nare's rule from course-guide/03 is short: Priya and Tomas may read (notes:read), and only Nare may also write (notes:write).
The running example is Priya's laptop calling search_notes for "nap study", then create_note. By the end the first works, the second is refused, and a stranger gets nothing.