[Cosmo-dev] JSON-RPC considered harmful

[Randy Letness]

Brian Moseley wrote:
>
> tickets don't exist in a void - they are granted on resources. you
> need a resource path or item uid in order to look up the item to see
> if the ticket is granted for that item or any of its ancestors.

You could add a service api for looking up a ticket by its key.  Then in 
the RPC layer, you just verify that the collection either has that 
ticket or one of its parents has it (with correct permissions). Eh, too 
complicated...I like your idea better.

-Randy