[WARP] Call for comments on pre-LC#2 of WARP spec; deadline 18 November

Hello Art, all,

Please find below a comment that we would like to submit to towards the
following WARP Editor's draft.
 http://dev.w3.org/2006/waf/widgets-access/

If you recall, I did raise the same comment at the joint F2F meeting
between Widgets and DAP WG during TP week, and it was recommended that I
submit it formally before the deadline.

ISSUE: The <access> element does not specify the ability to have nested
<feature> elements.

RATIONALE: The ability of having nested <feature> elements under the
<access> element, allows the widget authors to control access to a
specific set of (platform) features on a per resource/domain basis,
improving the overall access-control and Widgets security model.

PROPOSED RESOLUTION: Specify the use of zero or more <feature> elements
as a child of <access> element. This will require that the current
specification of <feature> element in Widgets 1.0 is reworded to say
that it could be present either as a child of <widget> element or
<access> element. However, in the spirit of having no impact to the
Widgets P&C 1.0 specification, an alternate approach would be to add a
new element called <accessFeature> (or similar) that uses the same
syntax and semantics of the <feature> element. An <access> element
thereby, may contain a zero or more <accessFeature> elements under it to
indicate the features that the subject resource/origin/domain in the
<access> element is entitled or has access to during the Widget
execution.

This, we believe will not only offer a fine-grain access control to
specific features on a per-domain basis but can also be benefit
implementations to load only those feature "modules" into the JavaScript
context that are declared by the widget authors on a per-domain basis.


Regards,
Suresh



-------------------------------------------
From: public-webapps-request@w3.org on behalf of Arthur
Barstow[SMTP:ART.BARSTOW@NOKIA.COM]
Sent: Tuesday, November 03, 2009 12:17:51 AM
To: public-webapps
Subject: [widgets] Call for comments on pre-LC#2 of WARP spec; deadline
18 November
Auto forwarded by a Rule

To address the comments against the 4-Aug-2009 LCWD of the WARP,  
Robin made a sufficient number of changes to the spec such that a new  
LCWD must be published.

Please review the latest Editor's Draft and submit comments before  
the 19 November Widgets voice conference:

  http://dev.w3.org/2006/waf/widgets-access/

-Regards, Art Barstow




---------------------------------------------------------------------
This transmission (including any attachments) may contain confidential information, privileged material (including material protected by the solicitor-client or other applicable privileges), or constitute non-public information. Any use of this information by anyone other than the intended recipient is prohibited. If you have received this transmission in error, please immediately reply to the sender and delete this information from your system. Use, dissemination, distribution, or reproduction of this transmission by unintended recipients is not authorized and may be unlawful.

Received on Wednesday, 18 November 2009 23:13:29 UTC