Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

An ACL is an RDF document (RDFSource) that contains WebAC statements that authorize access to repository resources.  Each resource may have their own ACL, or implicitly be subject to the ACL of a parent container.    The The location of the acl for a given resource may be discovered via a Link header with relation rel=acl.  

...

To create an ACL for a resource that does not already have one, a client needs to discover the ACL location (via HEAD or GET), then PUT to that location.

Authorizations

Authorizations are the permissions statements contained within an ACL document.  An ACL may should contain many authorizations, each of which must share the same subject.  The way this is achieved is via hash URIsone or more authorizations. Each authorization should have a hash URI resource as its subject, and an rdf:type of http://www.w3.org/ns/auth/acl#Authorization:

Code Block
languagetext
titleAuthorization
@prefix acl: <http://www.w3.org/ns/auth/acl#>

<#auth1> a acl:Authorization .

...