The receiving server MUST take care to be sure that the Update is authorized to modify its object.

{
  "id": "urn:uuid:3b43c69e-cd6b-4ffd-9ccd-183c5323d212",
  "uuid": "3b43c69e-cd6b-4ffd-9ccd-183c5323d212",
  "type": "Behavior",
  "content": "The receiving server MUST take care to be sure that the Update is authorized to modify its object.\n",
  "tag": [
    {
      "name": "ActivityPubServer",
      "id": "https://socialweb.coop/tag/ActivityPubServer"
    }
  ],
  "context": [
    "https://www.w3.org/TR/activitypub/",
    {
      "name": "7. Server to Server Interactions",
      "id": "https://www.w3.org/TR/activitypub/#server-to-server-interactions"
    },
    {
      "name": "7.3 Update Activity",
      "id": "https://www.w3.org/TR/activitypub/#update-activity-inbox"
    }
  ],
  "origin": {
    "source": "https://www.w3.org/TR/activitypub/",
    "section": {
      "id": "https://www.w3.org/TR/activitypub/#update-activity-inbox",
      "branch": [
        7,
        3
      ]
    },
    "selector": {
      "prefix": "Unlike the client to server handling of the Update activity, this is not a partial update but a complete replacement of the object.\n",
      "exact": "The receiving server MUST take care to be sure that the Update is authorized to modify its object.\n",
      "suffix": "At minimum, this may be done by ensuring that the Update and its object are of same origin.\n"
    }
  },
  "@context": [
    "https://www.w3.org/ns/activitystreams",
    "https://socialweb.coop/ns/testing/context.json"
  ]
}