[Cosmo-dev] JSON-RPC considered harmful
randy at osafoundation.org
Tue Dec 5 23:30:40 PST 2006
Brian Moseley wrote:
> tickets don't exist in a void - they are granted on resources. you
> need a resource path or item uid in order to look up the item to see
> if the ticket is granted for that item or any of its ancestors.
You could add a service api for looking up a ticket by its key. Then in
the RPC layer, you just verify that the collection either has that
ticket or one of its parents has it (with correct permissions). Eh, too
complicated...I like your idea better.
More information about the cosmo-dev