Re: Editors notes in CAP

[Doug Royer <Doug@xxxxxxxxx>]

Bernard Desruisseaux wrote:

> 3- It doesn't buy us anything to have an MOVE permission.
>    If the user as READ and DELETE granted for the old location
>    and WRITE granted for the new location he'll still be able
>    to do "search", "create" and "delete" to move the object
>   the hard way.   

Yes - you are right.

But after thinking about it more, I think we are both off the mark.

I think the the real definition is:

 You need to be able to add a new instance of the RELATED-TO property
 to the new location. You would do that with a MODIFY. It is a
 MODIFY because there may already be instances of RELATED-TO in
 the new location. So you have to MODIFY the new location to also
 contain the new RELATED-TO calid.

 You need MODIFY permission in order to remove an instance of
 RELATED-TO from the old location. You don't DELETE the RELATED-TO
 from the old location because there may be multiple instances
 that your are not removing.  So you have to MODIFY the VAGENDA so
 it no longer contains that specific instance.

So I don't think that READ or WRITE permission is what you need.

begin:vcard 
n:Royer;Doug
tel;pager:pager@xxxxxxxxx
tel;cell:208-520-4044
tel;fax:866-594-8574
tel;work:866-594-8574
x-mozilla-html:FALSE
url:http://Royer.com/People/Doug
org:INET-Consulting LLC <http://INET-Consulting.com
adr:;;;;;;
version:2.1
email;internet:Doug@xxxxxxxxx
title:Chief Executive Manager
x-mozilla-cpt:;64
fn:Doug Royer
end:vcard