RE: [access-control] Forms WG comments on Access Control WD

Anne,

We discussed this issue today at the Forms WG F2F meeting, and decided that we would abstain from any comment on the access-control protocol per se; however, we remain interested in enabling the implementation of access-control in XForms user agents.

While it appears that it would be possible to express the current WD protocol operations (resource GET, header tests, etc.) directly as XForms markup, it would seem to be pointless, as the its raison d'être is user agent enforcement, not optional compliance by authored markup.  

Therefore, we believe that recommendations to XForms user agent authors are in order.  (We note that the fact that XForms cross-site access is supported by some implementations was discussed at the 2007/11/05 WAF meeting [1].)

The Forms WG has directed me to make the following two requests:

Request 1:
The Forms WG requests that the WAF WG include in the next Working Draft Introduction a mention of XForms submission, to supplement the current list of XMLHttpRequest, XBL 2.0, and HTML 5.   Text for corresponding sections, if required, can be TBD (see request 2).

Request 2:
The Forms WG would like to continue to work with a representative from WAF to develop a joint proposal for taking advantage of access control in XForms.  The goal would be to develop the following:
- text for the access-control WD section on use case and goals for XForms integration
- best practice for taking advantage of access-control in XForms 1.1 

As noted in Requirement 10 of your current WD, it's likely that no changes to markup XForms markup will be required.  However, the XForms WG or WAF (or both) may choose to issue a note offering guidance to user agent implementers.  

I've been assigned to work with WAF on this issue for the Forms WG.  
 
We ask that WAF nominate a member to work with me to help achieve these goals.

Leigh.

[1] http://www.w3.org/2007/11/05-waf-minutes#item09

-----Original Message-----
From: Anne van Kesteren [mailto:annevk@opera.com] 
Sent: Tuesday, December 11, 2007 8:43 AM
To: Klotz, Leigh; public-appformats@w3.org
Cc: Forms WG
Subject: Re: [access-control] Forms WG comments on Access Control WD

Hi,

On Thu, 11 Oct 2007 22:59:59 +0200, Klotz, Leigh <Leigh.Klotz@xerox.com>  
wrote:
> The Forms WG is interested in providing comments on the "Enabling Read
> Access for Web Resources" working draft [1].

We recently published a new Working Draft on TR/ and the latest editor's  
is a little bit further ahead (editorial changes):

   http://www.w3.org/TR/2007/WD-access-control-20071126/
   http://dev.w3.org/2006/waf/access-control/

If you're going to provide feedback it would be good if you base it on  
those drafts.


> [1] http://www.w3.org/TR/2007/WD-access-control-20071001/

Kind regards,


-- 
Anne van Kesteren
<http://annevankesteren.nl/>
<http://www.opera.com/>

Received on Wednesday, 6 February 2008 22:41:14 UTC