Time/Place

Attendees

(plus) (facilitator)
(star) (notetaker)

Agenda & Minutes

  1. Review of recently closed issues:
  2. Revisit strictness of requirements for external content, recursive deletion, client-specified ACLs, etc.
  3. Authorization issues
    1. issue-165: Removing support for acl:accessToClass?
      1. Wait on response to https://github.com/solid/web-access-control-spec/issues/22
      2. CLAW only uses ACLs for very basic partitioning of drupal instances
    2. issue-166: Requiring WebIDs?
      1. PR: https://github.com/fcrepo/fcrepo-specification/pull/207 — needs review from Andrew, Ben, Danny, Simeon
    3. issue-168: Cross-domain Authorization?
      1. PR: https://github.com/fcrepo/fcrepo-specification/pull/208 — needs review from Andrew, Ben, Simeon
    4. issue-170: Require acl:Append and acl:Control
      1. PR: https://github.com/fcrepo/fcrepo-specification/pull/206 — needs review from Andrew, Ben
    5. issue-172: Clarify algorithm for finding authorizations
      1. Still pending clarification from Solid
    6. issue-176: ACL creation and linking -- be explicitly silent or specify?
      1. PR: https://github.com/fcrepo/fcrepo-specification/pull/214 — needs review from Andrew, Ben, Danny
  4. Versioning issues:
    1. https://github.com/fcrepo/fcrepo-specification/issues/215 — clarifying creation of versions with PUT
    2. Other versioning questions from API Alignment sprint: Versioning - Authorization Design
  5. External content issues:
    1. https://github.com/fcrepo/fcrepo-specification/issues/210: Clarify "expires" parameter
    2. https://github.com/fcrepo/fcrepo-specification/issues/211: Clarify response when copying remote content
  6. Notifications section:
    1. Esmé and Danny to review and create issues
  7. Fixity section:
    1. Simeon to review and create issues
    2. Simeon Warner's review: I do not see anything wrong with the fixity section. In its current form, support for fixity in any form is entirely optional, it simply points of out parts of the underlying HTTP Digest specification that might be relevant to systems that implement either transmission and/or persistence checks. If this is something that any part of the community relies upon then I think there will need to be an additional specification with a number of MUSTs, or it will end up being de-facto defined by a particular implementation.
    3. Note related issue just created: https://github.com/fcrepo/fcrepo-specification/issues/218 – although we can't use the suggested RFC SHOULD in the non-normative section, this seems like a sensible addition

Notes

  1. Issue-165: Removing support for acl:accessToClass?
    1. Suggestion, add wording that indicates:
      1. implementations MUST do accessToClass
      2. explain what accessToClass does
      3. inference is a MAY 
  2. Request for editors to review the current sprint AuthZ/Versioning design discussions
    1. Lots of questions around the intersection of ACLs and Versions
  3. Issue-210: Clarify intent of external content expiration parameter
    1. Suggestions:
      1. Potentially remove the "expiration" header parameter
      2. Add "Content-Location" under PUT for ingest by reference
        1. If you wanted to add to repo, you would retrieve and upload
      3. Further discussion with Benjamin Armintor before taking action
  4. Meeting stopped at agenda item 5.b
  5. When do we publish the next increment of the spec?
    1. Targeting the end of Oct
    2. After the alignment sprints

Action Items