W3C home > Mailing lists > Public > public-rww@w3.org > November 2012

Re: AccessControl : update + inference

From: Henry Story <henry.story@bblfish.net>
Date: Mon, 12 Nov 2012 23:27:47 +0100
Cc: public-rww@w3.org
Message-Id: <B351BF17-93A9-4D13-BC81-E6FF09F4EFBE@bblfish.net>
To: Andrei SAMBRA <andrei.sambra@gmail.com>

On 12 Nov 2012, at 23:07, Andrei SAMBRA <andrei.sambra@gmail.com> wrote:

> Jurgen, would you mind adding this use case to the wiki page? Here is the link: http://www.w3.org/2012/ldp/wiki/AccessControl#W3C_WebAccessControl

Not everybody has access to that wiki. You have to be a member of that group to access it.
I think Olivier Berger from Paris Telecom is a member of that group. 
Also I don't think the use case is a good one.

> 
> Andrei
> 
> On Mon, Nov 12, 2012 at 4:52 PM, Jürgen Jakobitsch <j.jakobitsch@semantic-web.at> wrote:
> hi,
> 
> since the discussion on AC is apparently taking shape, it might be a
> good time for my questions.
> 
> until now we more or less only had examples of AC in action on the
> data-retrieval side (as far as i know at least).
> 
> do acl-engines only really work with inference-engines when updating or
> are there recommended ways of dealing with the following example?
> 
> prereq.: acl - denies access to resource "x" (say a skos:Concept)
> 
> what should happen, when i add the triple?
> 
> resource "y" skos:broader resource "x"?
> 
> 
> there are several scenarios in which this could take place :
> 
> 1. should the update request be rejected with full inferencing, because
> it becomes clear the resource "x" is touched?
> 2. what happens in a non-inferencing environment? with that is created a
> relation between the two resources and i could construct (sparql-wise)
> whatever i want, which brings me to the idea of never trusting
> application/sparql-results+*...
> 
> 
> so the crucial point seems to be that ACLs can handle updates more
> flexible, a read and write access denied for a single resource might not
> be enough.
> 
> any pointer to the most flexible acl-ontology?
> i'm thinking about something like :
> 
> denyWriteAccess where resource "x" is the object.
> 
> any pointer really appreciated..
> 
> wkr turnguard
> 
> 
> 
> 
> 
> --
> | Jürgen Jakobitsch,
> | Software Developer
> | Semantic Web Company GmbH
> | Mariahilfer Straße 70 / Neubaugasse 1, Top 8
> | A - 1070 Wien, Austria
> | Mob +43 676 62 12 710 | Fax +43.1.402 12 35 - 22
> 
> COMPANY INFORMATION
> | web       : http://www.semantic-web.at/
> | foaf      : http://company.semantic-web.at/person/juergen_jakobitsch
> PERSONAL INFORMATION
> | web       : http://www.turnguard.com
> | foaf      : http://www.turnguard.com/turnguard
> | g+        : https://plus.google.com/111233759991616358206/posts
> | skype     : jakobitsch-punkt
> | xmlns:tg  = "http://www.turnguard.com/turnguard#"
> 

Social Web Architect
http://bblfish.net/




Received on Monday, 12 November 2012 22:28:21 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Monday, 12 November 2012 22:28:22 GMT