Re: Access Control Charter

Dear Ashok,
I think the definition of two collection resources is a good idea.
The collection of identities could be a collection of users' attributes,
and for access control you connect these attributes with a collection of
resources the users having such attributes are allowed to access. I think
that this will be done mostly by means of policies' definition.

Thanks.
All the best,
Serena 

----- Mail original -----
> De: "Ashok Malhotra" <ashok.malhotra@oracle.com>
> À: public-ldp-wg@w3.org
> Envoyé: Samedi 26 Avril 2014 17:41:19
> Objet: Access Control Charter
> 
> For access control, I was thinking, we need to define two collection
> resources.
> One, a collection of identities, populated by enumeration or some sort of
> pattern
> and the other a collection of resources, populated by enumeration or query.
> For access control you connect a collection of the Ids with a collection of
> resources
> specifying the privileges afforded.  The connection could be made by the
> person
> who manages the server or it could be made by a policy.
> 
> Does this make sense?
> --
> All the best, Ashok
> 
>

Received on Saturday, 26 April 2014 16:55:33 UTC