...
W3C's definition of WebAccessControl
From the WebAccessControl specificationsdescription at the W3C website:
WebAccessControl is a decentralized system for allowing different users and groups various forms of access to resources where users and groups are identified by HTTP URIs.
...
- Get the ACL of the requested resource, if exists, else.
- Get the ACL of the next ancestor recursively (using either ldp:contains or fedora:hasParent), if exists, else.
- If no more ancestor exist (root node reached) and no ACL is found: : check a file-system or classpath-based acl:Authorization. The default action of this acl:Authorization is to Deny access.
Finding the effective authorization:
...