This is one of many protocol behaviors described in ActivityPub.

Identifier

urn:uuid:3b43c69e-cd6b-4ffd-9ccd-183c5323d212

Content

The receiving server MUST take care to be sure that the Update is authorized to modify its object.

Origin

prefix Unlike the client to server handling of the Update activity, this is not a partial update but a complete replacement of the object.

The receiving server MUST take care to be sure that the Update is authorized to modify its object.
 
suffix At minimum, this may be done by ensuring that the Update and its object are of same origin.

https://www.w3.org/TR/activitypub/

JSON

{
  "id": "urn:uuid:3b43c69e-cd6b-4ffd-9ccd-183c5323d212",
  "uuid": "3b43c69e-cd6b-4ffd-9ccd-183c5323d212",
  "type": "Behavior",
  "content": "The receiving server MUST take care to be sure that the Update is authorized to modify its object.\n",
  "context": [
    "https://www.w3.org/TR/activitypub/",
    {
      "name": "7. Server to Server Interactions",
      "id": "https://www.w3.org/TR/activitypub/#server-to-server-interactions"
    },
    {
      "name": "7.3 Update Activity",
      "id": "https://www.w3.org/TR/activitypub/#update-activity-inbox"
    }
  ],
  "origin": {
    "source": "https://www.w3.org/TR/activitypub/",
    "section": {
      "id": "https://www.w3.org/TR/activitypub/#update-activity-inbox",
      "branch": [
        7,
        3
      ]
    },
    "selector": {
      "prefix": "Unlike the client to server handling of the Update activity, this is not a partial update but a complete replacement of the object.\n",
      "exact": "The receiving server MUST take care to be sure that the Update is authorized to modify its object.\n",
      "suffix": "At minimum, this may be done by ensuring that the Update and its object are of same origin.\n"
    }
  },
  "@context": [
    "https://www.w3.org/ns/activitystreams",
    "https://socialweb.coop/ns/testing/context.json"
  ]
}