ReplayOnly performs the write without calling Validate(), so it would skip every check
there. The canonical-Scope check runs for every caller. Beyond that, it is a replication
facility for trusted sync paths: only a caller who holds the grant may use it, and the
ownership half of the rule still applies, so a holder cannot replay a write to someone else's
personal item.
Why a
ReplayOnlysave is refused, or null.ReplayOnlyperforms the write without callingValidate(), so it would skip every check there. The canonical-Scope check runs for every caller. Beyond that, it is a replication facility for trusted sync paths: only a caller who holds the grant may use it, and the ownership half of the rule still applies, so a holder cannot replay a write to someone else's personal item.