Re: [ACL] WebDAV SEARCH and ACL?

From: Lisa Dusseault <lisa@osafoundation.org> · Date: Mon, 15 Nov 2004 09:07:36 -0800

CC'ing the DASL mailing list...  Since ACL is already RFC and SEARCH is 
not, guidance on this topic should go into the SEARCh draft.

Lisa

On Nov 15, 2004, at 1:14 AM, <Heiko.Weber@softwareag.com> wrote:

> Hello everyone,
>
>
>
> I have a question about the expected behavior of a WebDAV server, when
> resources are being searched that have ACLs defined on them. If I am
> searching through the resources in a collection and I'm not allowed to
> read the searched information on some of the resources, should the
> server simply ignore these resources and only list the URIs of the
> matching documents that were allowed to be read, or should the server
> explicitly say, that certain documents were not readable, similar to 
> the
> result of the Unix "find" command that also lists all the directories
> which it had no access to?
>
>
>
> If I have a <DAV:deny><DAV:privilege><DAV:all
> /></DAV:privilege></DAV:deny> defined on a resource for a certain user 
> -
> should a SEARCH with a query-schema-discovery document on that resource
> return something for that user, or rather just an HTTP 403?
>
>
>
> regards,
>
>    Heiko Weber
>
> _______________________________________________
> acl mailing list
> acl@webdav.org
> http://mailman.webdav.org/mailman/listinfo/acl