assemblee-virtuelle / assemblee-virtuelle/semapps

Implement WAC-Allow header

Open
#837 0 comments 0 reactions 0 assignees View on GitHub
acl standards support
Dominant language
TypeScript
Stars
103
Forks
14
Avg merge
1m
Merged PRs (30d)
2

Description

Currently we find about the rights we have on a resource by fetching the whole ACL resource (and we don't use the `Link` header, which make the code incompatible with Solid).

But there exists a header to know about the rights on the resource !

http://solid.github.io/web-access-control-spec/#wac-allow

This means we would only need to GET the resource, and we could know faster if we have write permission, for example.

> The data provider should still fetch the ACL resource if no WAC-Allow header is provided.

Contributor guide

No contributing guide indexed for this repository

Research direction

No files, tests, or entry points are named. Locate the code path that fetches the full ACL resource and read how resource permissions are checked; implement handling for WAC-Allow on the resource response, while preserving the ACL fetch when that header is absent, then verify write-permission checks.

Written by the indexing model from the issue text.

Assessment

Tech stack
node.js, typescript
Domain
api, authorization, backend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.