[Cosmo-dev] Sharing format questions

[Jeffrey Harris]

> Another one of the problems with how we're sharing items now is this:  
> say I share collection 'foo' with you and give you read-only permission, 
> and also share collection 'bar' with you and give you read-write 
> permission on it.  Now if my personal Contact item is in collection foo 
> -- which you don't have permission to modify -- you could simply drag 
> that Contact over to bar, modify my info on that item, sync bar, and I 
> would get those changes.

Mimi and I were just discussing this yesterday, in the context of 
Chandler sending out a URL to Scooby for a single Item.  The trial 
balloon I came away with was:

A) reference a user's items with a reasonably long lived URL pointing to 
that user's own personal soup, not to a particular collection

B) well behaved clients that receive an item read-only should continue 
to flag that item as read only when sharing it to their soup, even if 
it's included in a read-write collection.  Of course we can't rely on 
clients being well-behaved, so the server should be willing to accept 
multiple versions of the same UUID in different users' collections 
without giving information about other, unauthorized versions

This tends to imply that most of a Chandler user's repository will be 
synced up to Cosmo, which may have performance and bandwidth implications.

Sincerely,
Jeffrey