[Design] [Cosmo] [Proposal] Anonymous login with Ticket + Password
bcm at osafoundation.org
Mon Aug 21 14:36:20 PDT 2006
On 8/21/06, Bobby Rullo <br at osafoundation.org> wrote:
> This is an important distinction because one of the things that is
> being discussed is whether password-protected collections also need a
> ticket in the URL. It is hard to discuss this if we use ticket and
> URL synonymously.
the ticket would always be required, because the ticket bears a
privilege on the resource to which the ticket is granted. a password
by itself would authenticate the user, but in absence of a ticket, the
server would not know what access to give the user.
More information about the Design