[Design] Re: [Cosmo] Reconciling various sharing URLs

[Mimi Yin]

I think it makes sense to stick with the privileges defined in the  
ticket. But, I'm assuming that the /mc/ without ticket URL would  
always give you read/write access?

On Sep 19, 2007, at 10:38 AM, Brian Moseley wrote:

> On 9/19/07, Morgen Sagen <morgen at osafoundation.org> wrote:
>
>> However, in B) and C) Chandler doesn't know beforehand whether the
>> collection was published using one of the subscriber's accounts,  
>> or by
>> someone else; this would require additional handshaking with Cosmo to
>> get the list of published collections, etc.  Ok, I could do that, but
>> within B), there are two subcases:
>>
>> B1) ticket is read-write
>> B2) ticket is read-only
>>
>> In B2), do you want the user to end up being able to write to the
>> subscribed collection?  That might be counter-intuitive to subscribe
>> with a read-only ticket and end up with write privileges.
>
> actually, in case B i'd want you to ignore the ticket altogether and
> just use my account info to assert my identity to the server.
> _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
>
> Open Source Applications Foundation "Design" mailing list
> http://lists.osafoundation.org/mailman/listinfo/design