Re: Announcing Access Authorization Documentation

Christopher.McRae@library.ucsf.edu (Christopher McRae)
Message-id: <199309102347.AA09233@library.ucsf.edu>
From: Christopher.McRae@library.ucsf.edu (Christopher McRae)
Organization: UCSF Center for Knowledge Management
Email: mcrae@ckm.ucsf.edu or uunet!mcrae
Phone: 415/476-3577
Fax: 415/476-4653
To: luotonen@ptsun00.cern.ch (Ari Luotonen)
Cc: www-talk@library.ucsf.edu
In-reply-to: Your message of Fri, 10 Sep 1993 16:53:56 +0200
	<9309101453.AA14938@ptsun00.cern.ch> 
Subject: Re: Announcing Access Authorization Documentation 
Date: Fri, 10 Sep 1993 16:52:48 PDT
Sender: Christopher.McRae@library.ucsf.edu
Status: RO
Ari,
  I've read through your documentation and it looks good except for
one issue: there is no provision for controlling access *per method*.
Once we have implemented the PUT and POST methods of HTTP, I expect
it will be quite common for a webmaster to wish to allow for many
readers relative to the number of writers for a particular resource.
  I suggest that you add a <methods> field to the .www_acl file, such as

    method,method,...:template: group,user,group,...

or some other syntax.  Alternatively, you could specify the methods in
the rule file, but the access list seems a better place to me.
  Also, could you clarify some thing for me?  Regarding the <template>
specified in the protect rule of the rule file and also in each entry of
the access control list: Does this <template> refer only to files or can
it be a subdirectory - the latter indicating that the entire hierarchy
is to be accessible only to those in the corresponding user/group list?
Here are the pertinent references:

In <http://info.cern.ch/hypertext/WWW/AccessAuthorization/RuleFile.html> you
write

    The protect rule has two forms unifrom with those of the pass rule: 

	    protect <template>

    The filename matching the <template> is protected...

and also in 
<http://info.cern.ch/hypertext/WWW/AccessAuthorization/AccessControlList.html>,

    template is the name of a file in that directory

---------------------
Ari Luotonen writes:

Date: Fri, 10 Sep 93 16:53:56 +0200
From: luotonen@ptsun00.cern.ch (Ari Luotonen)
Message-Id: <9309101453.AA14938@ptsun00.cern.ch>
To: www-talk@nxoc01.cern.ch
Subject: Announcing Access Authorization Documentation


The pre-release of WWW Access Authorization Documentation has
been hung to the Web:

    WWW Project Home Page / Technical / Access Authorization

or URL:
 
    http://info.cern.ch/hypertext/WWW/AccessAuthorization/Overview.html
 
[remaining stuff deleted]
---------------------

Thanks,
Chris
--------------------------------------------------------------------------------
Christopher McRae			mail: mcrae@ckm.ucsf.edu
UCSF Center for Knowledge Management	at&t: 415/476-3577
530 Parnassus Avenue, Box 0840	 	fax: 415/476-4653
San Francisco, California 94143