Auxiliary Resources with own Access Controls

Open

#501 opened on Feb 22, 2023 1 comment 0 reactions 1 assignee View on GitHub

@csarven is already working on this.

Since Feb 22, 2023.

Assessment

This issue has not been assessed yet.

doc: Protocol topic: resource access

https://solidproject.org/ED/protocol#auxiliary-resources does not specify access controls on auxiliary resources themselves.

Raising this as an issue as it its essence was brought up by different people over time, e.g.:

https://github.com/solid/specification/issues/63#issuecomment-944919914 to be able to allow a Description Resource to be readable where the resource it is associated with (subject resource) may be protected.
https://github.com/solid/specification/issues/184#issuecomment-671030265 summarises some cases for readable ACLs, and it is an age old consideration, e.g.: https://github.com/search?q=org%3Asolid+%22readable+ACL%22&type=issues
https://github.com/solid/specification/issues/355#issuecomment-1439884108 raises intended access controls on storage description resource.
...

Related issues:

Notes:

Decoupling the authorization rules of auxiliary resources and subject resources would require a change in requirement: https://solidproject.org/ED/protocol#server-description-resource-authorization would be a conformance change as per https://www.w3.org/2021/Process-20211102/#class-3 .

Read the whole issue, then the project's contributing guide.
Comment on the issue to say you are picking it up — it saves two people doing the same work.
Fork the repository and make your change on a branch.
Open a pull request that references the issue number.