- From: Anne van Kesteren <annevk@opera.com>
- Date: Wed, 07 Feb 2007 15:20:09 +0100
- To: "Thomas Roessler" <tlr@w3.org>, "Brad Porter" <brad@tellme.com>
- Cc: "WAF WG (public)" <public-appformats@w3.org>, "access-control tf" <member-accesscontrol-tf@w3.org>
On Wed, 07 Feb 2007 13:51:01 +0100, Thomas Roessler <tlr@w3.org> wrote:
> Looking over this version, this one seems to introduce yet another
> algorithm: Basically, there seems to be a single allow ruleset and a
> single except ruleset.
>
> This is different from having a list of allow rulesets *each* *of*
> *which* can then have different exceptions.
You mean you want:
<?access-control
accept="http://*.example.org"
except="*"?>
<?access-control
accept="http://foo.example.org"
except="http://bar.example.org"?>
to be different from:
<?access-control
accept="http://*.example.org http://foo.example.org"
except="* http://bar.example.org"?>
or something?
Could you elaborate on the potential problems?
> I wonder what the rationale for the new proposal is.
I'm not sure I understood the "old proposal". Care to explain?
--
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>
Received on Wednesday, 7 February 2007 14:20:28 UTC