You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<pabout="" id="server-get-acl-without-representation" rel="spec:requirement" resource="#server-get-acl-without-representation"><spanproperty="spec:statement">When an authorized HTTP <code>GET</code> or <code>HEAD</code> request targets an ACL resource without an existing representation, the <spanrel="spec:requirementSubject" resource="spec:Server">server</span><spanrel="spec:requirementLevel" resource="spec:MUST">MUST</span> respond with the <code>404</code> status code as per [<cite><aclass="bibref" href="#bib-rfc9110">RFC9110</a></cite>].</span></p>
614
614
<pabout="" id="server-root-container-acl" rel="spec:requirement" resource="#server-root-container-acl"><spanproperty="spec:statement">When an authorized HTTP <code>GET</code> or <code>HEAD</code> request targets <ahref="#root-container">root container</a>’s ACL resource, the <spanrel="spec:requirementSubject" resource="spec:Server">server</span><spanrel="spec:requirementLevel" resource="spec:MUST">MUST</span> respond with a representation.</span></p>
615
615
<pabout="" id="server-root-container-acl-authorization-control" rel="spec:requirement" resource="#server-root-container-acl-authorization-control"><spanproperty="spec:statement">The ACL resource of the root container <spanrel="spec:requirementSubject" resource="spec:Server"></span><spanrel="spec:requirementLevel" resource="spec:MUST">MUST</span> include an Authorization allowing the <code>acl:Control</code> access privilege (<cite><ahref="#acl-mode-control" rel="rdfs:seeAlso"><code>acl:Control</code></a></cite> access mode).</span></p>
<p>Implementations are encouraged to use named resources (IRIs) rather than blank nodes when describing Authorizations and their properties, as blank nodes may not be referenceable by operations that require explicit node identification.</p>
<code>?clientCondition a acl:ClientCondition ; acl:client $client .</code>
957
+
<code>?issuerCondition a acl:IssuerCondition ; acl:issuer $issuer .</code>
952
958
<code> }</code>
953
959
<code>}</code></pre>
954
960
<p><code>ASK</code> query matching an Authorization given inputs <var>resource</var>, <var>agent</var>, <var>mode</var>, <var>client</var> and <var>issuer</var>.</p>
<tdproperty="spec:statement">Add security consideration advisement for <ahref="#consider-condition-control">preserving Authorization integrity with conditions</a>.</td>
0 commit comments