Time/Place

This meeting is a hybrid teleconference and IRC chat. Anyone is welcome to join...here's the info:

Attendees 

Agenda

  1. Fedora 4.7.1 release... let's push this out before January. Seeking release-manager volunteer (committer), Andrew Woods will assist
  2. Maven GroupId for API-related code
  3. Extending WebAC: permissions inheritance via relationships other than ldp:contains
  4. TCK planning
    1. Hacking event?
  5. Import/Export workshop accepted for Code4Lib 2017
  6. ...
  7. Status of "in-flight" tickets

    key summary type created updated due assignee reporter priority status resolution

    Unable to locate Jira server for this macro. It may be due to Application Link configuration.

Ticket Summaries

  1. Please squash a bug!

    key summary type created updated due assignee reporter priority status resolution

    Unable to locate Jira server for this macro. It may be due to Application Link configuration.

  2. Tickets resolved this week:

    key summary type created updated due assignee reporter priority status resolution

    Unable to locate Jira server for this macro. It may be due to Application Link configuration.

  3. Tickets created this week:

    key summary type created updated due assignee reporter priority status resolution

    Unable to locate Jira server for this macro. It may be due to Application Link configuration.

Minutes

 

  1. Fedora 4.7.1 release - 
    1. Release manager - preferably a committer - any takers?  Put out a call for someone.  
  2. Maven GroupId for API-related code
    1. Skipping this till Unknown User (acoburn)'s around
  3. Extending WebAC: permissions inheritance via relationships other than ldp:contains
    1. Unknown User (bbpennel) put this on the list.  Using the webAC module with a PCDM with indirect containers.  The inheritance model in the webAC module is using ldp:contains. Can it be changed to work with other relationships? 
    2. Ben has not tested this specific use case, is just exploring it. 
    3. What Ben wants to do should work now - so there's probably a bug in the code if it doesn't.  The property in the indirect container that's being used should represent LDP containment. The current impl may not be considering a larger set of conditions, beyond Basic Containment. 
    4. ldp:contains triple may not appear at all in this case - but webAC should still respect that containment relationship.  Many LDP containment relationships are represented by ldp:contains, but many are not and we need to make sure those cases are covered. 
    5. WebAC spec says you need to respect LDP containment, this specific use case may not currently be covered by the current implementation.  
      1. https://github.com/solid/web-access-control-spec    

      2. https://github.com/solid/web-access-control-spec#acl-inheritance-algorithm

      3.  https://github.com/solid/web-access-control-spec#containers-and-inherited-acls

    6. What would happen in a multiple containment situation
    7. How are you finding and traversing containment relationships?  If there are limits, we need to be clear on what they are.  
    8. Action Item - Ben will test out this scenario and file a ticket depending on how it goes. 
    9. Action Item - if it does fail in this scenario, find out who might need this use case and figure out how to fix it.  Smithsonian might be able to offer some insight here. 
    10. Is inheritance a use case for doing access control in Fedora?  Yes - for some it's ease of maintenance.   
      1. need a way to apply a policy to wide swaths of the repository - inheritance is one way of doing that. 
  4. TCK planning
    1. No one present to represent this bullet item. 
    2. Talk about this next week, perhaps
  5. Import/Export workshop accepted for Code4Lib 2017
    1. Esmé CowlesAndrew WoodsBethany Seeger Confirmed to participate in presenting workshop
  6. Import/Export sprint part III starts on Monday, December 4th - Import - Export Sprint Resources
  7. In flight ticket review
    1. If you have time, take on a ticket
  • No labels

1 Comment

  1. University of Maryland is looking to enforce access controls via predicates specified on the resource with ldp:hasMemberRelation / ldp:MembershipResource, etc., so we would be interested in helping to explore the limitations of the current WebAC implementation and the possibility of extending it to respect direct/indirect container membership as discussed in point 3 above, in spite of the sobering comments on  Unable to locate Jira server for this macro. It may be due to Application Link configuration. .