This repository has been archived by the owner on Jul 6, 2020. It is now read-only.

How does WAC apply to SPARQL Update #5

Open

kjetilk opened this issue Jan 17, 2020 · 1 comment

Labels

HTTP PATCH body

kjetilk commented Jan 17, 2020

Also begun in solid/specification#125 , we need to decide how the Web Access Control access modes affect SPARQL Update queries.

Author

kjetilk commented Jan 17, 2020

For most queries, it is fairly straigtforward:

Anything with a WHERE clause needs acl:Read
Anything that has projected variable bindings needs acl:Read (which might be more queries in the future)
Anything that INSERTs need acl:Append (or acl:Write)
DELETE is currently somewhat problematic, see Potential confidentiality breach with DELETE queries. #2 . Ideally, it should require only acl:Write.

We can return to DESCRIBE, LOAD, CLEAR, CREATE, DROP, COPY, MOVE and ADD as appropriate.

RubenVerborgh added the HTTP PATCH body label

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.