You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<ddabout="#acl-resource" property="skos:definition">An ACL resource is represented by an <em>RDF document</em> [<cite><aclass="bibref" href="#bib-rdf11-concepts">RDF11-CONCEPTS</a></cite>] that includes <ahref="#authorization">Authorizations</a> determining access to resources.</dd>
<ddabout="#authorization" property="skos:definition">An Authorization is an abstract thing identified by a URI whose properties are defined in an <ahref="#acl-resource">ACL resource</a>, e.g., <ahref="#access-mode">access modes</a> granted to <ahref="#agent">agents</a> the ability to perform operations on <ahref="#resource">resources</a>.</dd>
418
+
<ddabout="#authorization" property="skos:definition">An Authorization is an abstract thing which is identified by a URI and whose properties are defined in an <ahref="#acl-resource">ACL resource</a>, e.g., <ahref="#access-mode">access modes</a> granted to <ahref="#agent">agents</a> the ability to perform operations on <ahref="#resource">resources</a>.</dd>
<pid="acl-accessto">The <code>acl:accessTo</code>property value is used to check if access is allowed for a specific resource.</p>
570
+
<pid="acl-accessto">The <code>acl:accessTo</code>predicate denotes the resource to which access is being granted.</p>
571
571
572
-
<pid="acl-default">The <code>acl:default</code>property value (the container resource in context) is used to apply the Authorization to the original requested resource.</p>
572
+
<pid="acl-default">The <code>acl:default</code>predicate denotes the container resource to which an Authorization can be applied to a resource lower in the collection hierarchy.</p>
573
573
574
574
<p>Inheriting Authorizations from the most significant container’s ACL resource is useful to avoid individually managing an ACL resource for each resource, as well as to define access control for resources that do not exist yet.</p>
<pid="acl-agentclass">The <code>acl:agentClass</code> predicate denotes a <ahref="#agent-class">class of agents</a> being given the access permission.</p>
<dd>Allows access to any authenticated agent.</dd>
645
646
</dl>
646
647
647
648
<pid="acl-agentgroup">The <code>acl:agentGroup</code> predicate denotes a <ahref="#agent-group">group of agents</a> being given the access permission. The object of an <code>acl:agentGroup</code> statement is an instance of <code>vcard:Group</code>, where the members of the group are specified with the <code>vcard:hasMember</code> predicate.</p>
648
649
649
-
<pid="acl-origin">The <code>acl:origin</code> predicate denotes the <ahref="#origin">origin</a> of an HTTP request is being given the access permission.</p>
650
+
<pid="acl-origin">The <code>acl:origin</code> predicate denotes the <ahref="#origin">origin</a> of an HTTP request that is being given the access permission.</p>
0 commit comments