...
| Property | Meaning |
|---|---|
acl:accessTo | the URI of the protected resource |
acl:accessToClass | an RDF class of protected resources. (While the WebAC specification does not support acl:accessToClass, servers are required to support it according to the Fedora specification) |
acl:agent | the user (in the W3C WebAC ontology, the user is named with a URI, but Fedora's implementation supports both URI- and string-based usernames) |
acl:mode | the type of access (WebAC defines several modes: acl:Read, acl:Write, acl:Append, and acl:Control; Fedora implements acl:Read and acl:Write) |
acl:accessToClass | an RDF class of protected resources |
agentClass | Identifies a class of agents, rather than a specific agent. Usage according to the the WebAC spec is limited to foaf:Agent (meaning "everybody"), and acl:AuthenticatedAgent (meaning "any authenticated agent"). |
acl:acl:agentGroup | a group of users (defined as a foaf:Group resource listing its users with the foaf:member property) |
acl:agentClassIdentifies a class of agents, rather than a specific agent. Usage is limited to foaf:Agent (meaning "everybody"), and acl:AuthenticatedAgent (meaning "any authenticated agent").default | signifies that an authorization for a container may be inherited by children of that container, if they do not otherwise define their own ACLs. |
acl:mode | the type of access (WebAC defines several modes: acl:Read, acl:Write, acl:Append, and acl:Control; Fedora implements acl:Read and acl:Write) |
For a more detailed explanation of Authorizations and their properties, see WebAC Authorizations.
Agents
Agents are the users of Fedora. These identify the principles (in a security sense) have made authenticated requests to the repository. In ACL Authorizations used by Fedora, these may be represented as strings or as URIs. The SOLID WebAC spec stipulates that agents are identified by URIs, and suggests (but does not have any normative language requiring) that these URIs are intended to be WebIDs. The Fedora specification does not comment on the topic of identifying agents. Nevertheless, for legacy purposes, the Fedora 5.x software allows strings or URIs to identify agents (e.g. "bob" or <http://example.org/people/bob>). When using URIs, there is no expectation be Fedora that these URIs be resolvable, or have a representation.
Examples of Authorizations
...