[Proposed Work Item]: Best practises for container usage

[jeswr]

This work item is to describe a set of best practises around how to structure resources within a Solid Pod when an application writes.

[elf-pavlik]

I think we should document how containers are used for access control. Specifically

• Resource level access control
• Access control systems using container based inheritance
• Separation between relations within the data itself, based on domain specific predicates, from genric LWS containment

I have an early version of SAI policy engine for CSS which also supports this use case

• [UC] Context aware access policies w3c/lws-ucs#17

I would be interested to see other work which explores defining access controls based on relations within the data itself.

EDIT: Client managed statements in the containers still aren't fully solved problem

• Specify container description solid/specification#227
• https://communitysolidserver.github.io/CommunitySolidServer/latest/usage/metadata/#impact-on-creating-containers

I need to catch up where LWS stands on that topic.

[jeswr]

The ODI is willing to invest time to support delivery of this work.