[Cosmo] Question about privileges & tickets
grant at osafoundation.org
Wed Feb 15 15:42:18 PST 2006
One issue we've been having with Chandler and tickets is that it's
hard to determine what privileges you've been granted with a ticket.
Especially once we have/are using <CalDAV:view-free-busy> tickets, it
would be nice to be able to tell what privileges a ticket gives you:
This way, clients can tell what kind of REPORT to issue (or, for
offline clients, like Chandler, whether or not to GET all the events).
My hope was to be able to use the <ticketdiscovery> property for
this. In other words, if a client issues a <ticketdiscovery> PROPFIND
request that's authorized via a ticket, servers would be required to
include <ticketinfo> for that ticket in the response. Sadly, this
doesn't seem to work with either xythos or cosmo, and is also not
required by the ticket internet draft.
Does this sound like a reasonable feature request for cosmo (and/or
future revisions of the ticket draft, if that moves forward)?
[FWIW, Chandler currently only deals with <DAV:read> and <DAV:write>
tickets, so Chandler is able to tell whether you have write access
via a somewhat cheesy manoeuvre that works for cosmo: We MKCOL a
collection underneath your calendar collection, see whether that
succeeds, and then DELETE it. This is the underlying reason why
subscribing to an Oracle server's CalDAV calendar gives you a read-
only share in Chandler].
More information about the Cosmo