[Design] [Cosmo] [Proposal] Anonymous login with Ticket + Password

[Brian Moseley]

On 8/21/06, Bobby Rullo <br at osafoundation.org> wrote:

> This is an important distinction because one of the things that is
> being discussed is whether password-protected collections also need a
> ticket in the URL. It is hard to discuss this if we use ticket and
> URL synonymously.

the ticket would always be required, because the ticket bears a
privilege on the resource to which the ticket is granted. a password
by itself would authenticate the user, but in absence of a ticket, the
server would not know what access to give the user.