[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Editors notes in CAP
Bernard Desruisseaux wrote:
> 3- It doesn't buy us anything to have an MOVE permission.
> If the user as READ and DELETE granted for the old location
> and WRITE granted for the new location he'll still be able
> to do "search", "create" and "delete" to move the object
> the hard way.
Yes - you are right.
But after thinking about it more, I think we are both off the mark.
I think the the real definition is:
You need to be able to add a new instance of the RELATED-TO property
to the new location. You would do that with a MODIFY. It is a
MODIFY because there may already be instances of RELATED-TO in
the new location. So you have to MODIFY the new location to also
contain the new RELATED-TO calid.
You need MODIFY permission in order to remove an instance of
RELATED-TO from the old location. You don't DELETE the RELATED-TO
from the old location because there may be multiple instances
that your are not removing. So you have to MODIFY the VAGENDA so
it no longer contains that specific instance.
So I don't think that READ or WRITE permission is what you need.
org:INET-Consulting LLC <http://INET-Consulting.com
title:Chief Executive Manager