Skip to content

Always give the owner of a pod control access to resources #720

@RubenVerborgh

Description

@RubenVerborgh

See nodeSolidServer/node-solid-server#1489

This requires:

  • Tracking the pod owner
  • Creating an AllowOwnerControlAuthorizer
    • handles all resources
    • allows Control when authenticated as the owner
  • Configuring the AllowOwnerControlAuthorizer

I see two possible strategies:

  1. Either AllowOwnerControlAuthorizer is a wrapper that takes the existing authorizer, and adds Control to whatever permissions returned by that authorizer.
  2. Either we build a CombinedAuthorizer that invokes AllowOwnerControlAuthorizer and AllowOwnerControlAuthorizer in parallel, and creates the union of the permissions.

In the first, we need to make the arbitrary decision which authorizers are wrappers and which are not (unless we all make them wrappers!). The second seems more flexible, but is an extra component and relies on the possibility of creating a union.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions