Re: PROPFIND Depth:1 and ACLs

Cyrus Daboo <[email protected]>
Newsgroups gmane.ietf.webdav
Message-ID <[email protected]>
Hi Julian,

--On April 11, 2007 11:51:00 PM +0200 Julian Reschke 
<[email protected]> wrote:

>> Any suggestions on how best to deal with this?
>
> I think the 403 approach makes sense, except if you treat the existence
> of that resource to be secret as well.

Of course it is not just the existence of the resource that is being given 
away, but also the "name" of the resource. Since most people name documents 
with something that is vaguely descriptive of the content, then exposing 
that name, even via a 403, maybe too much.

-- 
Cyrus Daboo
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.