You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<pid="req-server-link-acl">When a server wants to enable applications to discover <ahref="#authorization">Authorizations</a> associated with a given <ahref="#resource">resource</a>, the server MUST advertise the <ahref="#acl-resource">ACL resource</a> that is associated with a resource by responding to an HTTP request including a <code>Link</code> header with the <code>rel</code> value of <code>acl</code> (<cite><ahref="#acl-link-relation" rel="rdfs:seeAlso">acl Link Relation</a></cite>) and the ACL resource as link target.</p>
506
+
<pid="req-server-link-acl">When a server wants to enable applications to discover <ahref="#authorization">Authorizations</a> associated with a given <ahref="#resource">resource</a>, the server MUST advertise the <ahref="#acl-resource">ACL resource</a> that is associated with a resource by responding to an HTTP request including a <code>Link</code> header with the <code>rel</code> value of <code>acl</code> (<cite><ahref="#acl-link-relation" rel="rdfs:seeAlso">acl Link Relation</a></cite>) and the ACL resource as link target [<cite><aclass="bibref" href="#bib-rfc8288">RFC8288</a></cite>].</p>
507
507
508
508
<p>ACL Resource Discovery is used towards determining the <cite><ahref="#effective-acl-resource" rel="rdfs:seeAlso">Effective ACL Resource</a></cite> of a resource.</p>
509
509
@@ -516,7 +516,7 @@ <h4 property="schema:name"><span>Issue</span>: Link Relation Type</h4>
516
516
517
517
<pid="req-server-resource-acl-max">Servers MUST NOT directly associate more than one ACL resource to a resource.</p>
518
518
519
-
<pid="client-link-acl">Clients can discover the ACL resource associated with a resource by making an HTTP request on the target URL, and checking the HTTP <code>Link</code> header with the <code>rel</code> parameter [<cite><aclass="bibref" href="#bib-rfc8288">RFC8288</a></cite>].</p>
519
+
<pid="client-link-acl">Clients can discover the ACL resource associated with a resource by making an HTTP request on the target URL, and checking the HTTP <code>Link</code> header with the <code>rel</code> parameter.</p>
<pid="req-server-wac-allow">Servers MUST advertise client’s access privileges on a resource by including the <code>WAC-Allow</code> HTTP header (<cite><ahref="#wac-allow" rel="rdfs:seeAlso">WAC-Allow</a></cite>) in the response of HTTP <code>GET</code> and <code>HEAD</code> requests.</p>
<p>Clients can discover access privileges on a resource by making an HTTP <code>HEAD</code> or <code>GET</code> request on the target resource, and checking the <code>WAC-Allow</code> header value for access parameters listing the allowed access modes per permission group (<cite><ahref="#wac-allow" rel="rdfs:seeAlso">WAC-Allow</a></cite>).</p>
921
-
</div>
922
-
</div>
917
+
<pid="clients-discovering-access-privileges">Clients can discover access privileges on a resource by making an HTTP <code>GET</code> or <code>HEAD</code> request on the target resource, and checking the <code>WAC-Allow</code> header value for access parameters listing the allowed access modes per permission group (<cite><ahref="#wac-allow" rel="rdfs:seeAlso">WAC-Allow</a></cite>).</p>
923
918
924
919
<pid="req-server-cors-aceh-wac-allow">When a server participates in the <abbrtitle="Cross-Origin Resource Sharing">CORS</abbr> protocol [<cite><aclass="bibref" href="#bib-fetch">FETCH</a></cite>], the server MUST include <code>WAC-Allow</code> in the <code>Access-Control-Expose-Headers</code> field-value in the HTTP response.</p>
0 commit comments