Re: Extending the WebID protocol with Access Delegation

On 8/17/12 3:22 AM, Henry Story wrote:
> Still I think you make a good point. We should in the paper try to specify much more precisely
> WHEN this protocol is needed.
>
>
> So for example I think that if all the resources served by a server return the same representation irrespective of who makes the request, then the solution you outline may be thought to be completely satisfactory.

And it should be so. This is why we built Linked Data transformation 
middleware i.e., turn as many data formats as possible into 5-star 
Linked Data resources.
>
> But then if we think of it perhaps not. The On-Behalf-Of Request made by the secretary is a way for the
> secretary to indicate that she will not pass that information on to anyone other than the person she is working on behalf-of.

The ACL engine can figure that out once it has access to the identity 
that the secretary is acting on behalf-of. In the real world the 
secretary relationship is established and verifiable by way of 
organization structure (just another graph in a different realm).

> It makes a commitment of secrecy by the client. This "legal" aspect could also be developed more in the paper.
The semantics are what matter.
>
> I am off for a week to a philosophy conference so I won't be very responsive.

Okay, enjoy :-)


-- 

Regards,

Kingsley Idehen	
Founder & CEO
OpenLink Software
Company Web: http://www.openlinksw.com
Personal Weblog: http://www.openlinksw.com/blog/~kidehen
Twitter/Identi.ca handle: @kidehen
Google+ Profile: https://plus.google.com/112399767740508618350/about
LinkedIn Profile: http://www.linkedin.com/in/kidehen