Henry Story

Results 422 comments of Henry Story

I implemented WAC 5 or more years ago as it was only an ontology. I need to re-implement this now so will look in more detail at the inheritance algorithm....

Issue #184 also shows why deprecation of `:accessTo` is not needed. In situations where it can be inferred it allows the statement of what has access to be open ended....

Can you give an example of the policy you are thinking of and what your interpretation of its working is meant to be, and which documents you are basing that...

Thanks. So I think that does not apply to the minimal extension to WAC [described here](https://github.com/solid/authorization-panel/blob/acp-diff/proposals/wac-acp-diff-story.md#minimal-extension-to-wac-enabling-the-same-features) (part of [PR201](https://github.com/solid/authorization-panel/pull/201)) which allows the sharing of "policies" or partial access control rules,...

I find `acl:default` to be quite problematic, especially if one takes clients into account, which one has to in a protocol [issue 259](https://github.com/solid/specification/issues/259). The idea of each resource having its...

The relevant text you are referring to is [this one](https://github.com/solid/authorization-panel/blob/main/proposals/acp/index.md#advanced-policy-management) I think: > When a policy is added to an ACR for a container, it is possible to add it...

Let us look at a more complicated case next. We want to make information publicly visible on who can access a resource without revealing who has access, so that those...

> A few questions that come to mind would be: > a. How do you manage the lifecycle of such ACLs (make sure there's no orphans) These would be server...

Thanks for those clarifications. That is really helping the discussion move along. As to whether it is a big departure from acls currently, it all depends on how it is...

@matthieubosquet wrote > I really like this suggestion and completely agree that the "Control" mode is doing something different to other access modes, which I find incoherent with the whole...