I think it makes sense to stick with the privileges defined in the
ticket. But, I'm assuming that the /mc/ without ticket URL would
always give you read/write access?
On Sep 19, 2007, at 10:38 AM, Brian Moseley wrote:
On 9/19/07, Morgen Sagen <[EMAIL PROTECTED]> wrote:
However, in B) and C) Chandler doesn't know beforehand whether the
collection was published using one of the subscriber's accounts,
or by
someone else; this would require additional handshaking with Cosmo to
get the list of published collections, etc. Ok, I could do that, but
within B), there are two subcases:
B1) ticket is read-write
B2) ticket is read-only
In B2), do you want the user to end up being able to write to the
subscribed collection? That might be counter-intuitive to subscribe
with a read-only ticket and end up with write privileges.
actually, in case B i'd want you to ignore the ticket altogether and
just use my account info to assert my identity to the server.
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Open Source Applications Foundation "Design" mailing list
http://lists.osafoundation.org/mailman/listinfo/design
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
Open Source Applications Foundation "Design" mailing list
http://lists.osafoundation.org/mailman/listinfo/design
