Re: API patterns and requirements

On Fri, Jun 18, 2010 at 4:35 PM, <Frederick.Hirsch@nokia.com> wrote:

> I think this demonstrates the value of an access control mechanism such as
> the Policy Framework, where each navigator.system.GET('item') triggers a
> policy decision based on policy, avoiding needless user interaction on each
> call while allowing the granularity as specified by policy.
>

 Yes. Or equally the ability for a web application to request a bunch of
system information in a single API request and only have one decision
needing to be made. The design of the System Information API should
facilitate both a simple, one-time user-explicited authorization or a policy
based authorization to occur in an equally straight forward way.

- Richard