Unclear What mayBeAuthoredByNonOwner controls, and whether it currently affects any behavior, is not shown by the finding.
What
- The settings-management code now threads through a new
mayBeAuthoredByNonOwnervalue as part of its input. - The
/output-stylecommand now checks this value for the current caller, and when it's true, filters the list of available output styles down to only those that pass an additional check, and returns a generic "detail withheld on this connection" message instead of the real error if saving a style fails.
Why
This limits what a caller who might not be the account owner can see or change through /output-style, including hiding detailed error information that could otherwise leak information.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
What `mayBeAuthoredByNonOwner` controls, and whether it currently affects any behavior, is not shown by the finding.