...

W3C's definition of WebAccessControl

From the WebAccessControl specificationsdescription at the W3C website:

WebAccessControl is a decentralized system for allowing different users and groups various forms of access to resources where users and groups are identified by HTTP URIs.

...

1. Get the ACL of the requested resource, if exists, else.
2. Get the ACL of the next ancestor recursively (using either ldp:contains or fedora:hasParent), if exists, else.
3. If no more ancestor exist (root node reached) and no ACL is found: : check a file-system or classpath-based acl:Authorization. The default action of this acl:Authorization is to Deny access.

Finding the effective authorization:

...