search

RubenVerborgh / solid-server-architecture

Proposed architecture for a Solid server
https://rubenverborgh.github.io/solid-server-architecture/solid-architecture-v1-3-0.pdf
13 stars 2 forks source link

Why not checkAccess? #22

Closed kjetilk closed 5 years ago

kjetilk commented 5 years ago

Why does the Authorization module not use the checkAccess semantics of the acl-check-module? It lead to pretty readable code.

RubenVerborgh commented 5 years ago

Authorizer works on a higher level; it is not necessarily WAC. For instance, we could plug in a component that (arbitrarily) gives me write access to all .txt files, or that always allows one user but never another (great for testing).

checkAccess would probably be used by AclBasedAuthorizer. It has a rather specialized signature and requires quite some knowledge to pass in arguments. I would expect AclBasedAuthorizer to receive some of these arguments in its constructor.