From 53c56c0bc96300d5f43d94712b7934a188193d57 Mon Sep 17 00:00:00 2001
From: Lewis <lewis@tangled.org>
Date: Sat, 4 Apr 2026 11:41:46 +0300
Subject: [PATCH] appview/didassign: actually save rbac

Lewis: May this revision serve well! <lewis@tangled.org>
---
 appview/state/knotstream.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/appview/state/knotstream.go b/appview/state/knotstream.go
index 58f2311b..3793459b 100644
--- a/appview/state/knotstream.go
+++ b/appview/state/knotstream.go
@@ -463,6 +463,10 @@ func ingestDIDAssign(d *db.DB, enforcer *rbac.Enforcer, source ec.Source, msg ec
 		}
 	}
 
+	if err := enforcer.E.SavePolicy(); err != nil {
+		return fmt.Errorf("save RBAC policies after didAssign: %w", err)
+	}
+
 	logger.Info("didAssign processed successfully",
 		"repo_did", record.RepoDid,
 		"owner_did", record.OwnerDid,
-- 
2.51.2