search

w3c / automotive

W3C Automotive Working Group Specifications
Other
146 stars 68 forks source link

VISS Core: why is access control non-normative? #467

Closed samuelweiler closed 1 year ago

samuelweiler commented 1 year ago

https://www.w3.org/TR/viss2-core/#access-control-model seems pretty code. Why is it non-normative?

erikbosch commented 1 year ago

The main argument during the review was that the use of the Access Grant/Token servers may not be feasible for all deployments. That there could be deployments where for example grants are pre-provisioned in factory or by FOTA updates rather than being dynamically fetched as in the picture. So the decision at that time was that VISS shall show a possible way to get an access token, but it shall not make it mandatory to use that methodology, i.e. it shall for example be possible for a vehicle OEM to choose a different technology.

tguild commented 1 year ago

agree to use mandatory instead of normative

UlfBj commented 1 year ago

Fixed in PR479