Skip to content

docs: align invalid controller errors with the replica - #428

Open
mraszyk wants to merge 4 commits into
mainfrom
docs/execution-errors-invalid-controller
Open

docs: align invalid controller errors with the replica#428
mraszyk wants to merge 4 commits into
mainfrom
docs/execution-errors-invalid-controller

Conversation

@mraszyk

@mraszyk mraszyk commented Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Summary

Updates the execution-error reference to explain controller and subnet admin permissions more accurately.

  • Clarifies which canister's controllers are required for code installation and snapshot loading.
  • Adds the missing subnet admin error sections, including permissions, supported call types, and how to resolve the errors.
  • Removes the obsolete snapshot-controller error entry.

@mraszyk
docs: align invalid controller errors with the replica
a696df7 
Document the three roles reported by CanisterInvalidController
(dfinity/ic#11842), add the invalid-controller-subnet-admin section the
replica's error help links to, and remove the CanisterSnapshotNotController
error, which no longer exists.
@github-actions

github-actions Bot commented Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Here's your preview: https://y2j3u-vaaaa-aaaam-ahtkq-cai.icp0.io

@mraszyk
docs: scope subnet admins to the subnets that can have them
34c89dc 
Subnet admins are only taken into account on rented subnets and cloud
engines on the free cost schedule, and on cloud engines they can access
canisters in every way except rename_canister. Add the
invalid-subnet-admin section the replica's error help links to.
@mraszyk
docs: link the free cost schedule to the interface spec
2f7ea5b
@mraszyk
docs: correct subnet admin permissions and query access
ada247d
@mraszyk

mraszyk commented Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Feedback addressed:

  • Documented direct non-replicated queries for list_canisters, while retaining the ingress-update restriction.
  • Added canister_status to rented-subnet admin permissions and clarified that admins bypass status visibility.
  • Scoped the Invalid controller fallback to controller-only operations and distinguished visibility-controlled reads.
  • Updated the PR description to match the implementation and record the verified dfinity/ic commit.

Validation: page validator, git diff --check, and npm run build passed.

@mraszyk
mraszyk marked this pull request as ready for review October 26, 2026 11:08
@mraszyk
mraszyk requested review from a team as code owners October 26, 2026 11:08

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@mraszyk