Re: [ACL] RFC 3744: Modifying ACEs

Werner Donné wrote:
> I have read that paragraph, but it doesn't solve much. What happens
> if the client leaves the protected and inherited ACEs in the acl
> element? From the evaluation procedure it follows there is an order
> in the ACEs. Since protected and inherited ACEs do not necessarily
> come first, they have to be included in the request body of the ACL
> method. Leaving them out would require a way to match old and new
> ACEs in order to find back the correct positions.

Yes, agreed (now that you mention it :-).

> On the other hand, if protected and inherited ACEs are not allowed
> to be present, there should be corresponding preconditions for the
> ACL method.

I have to confess that I'm not sure what the spec tries to say here, nor 
how it is implemented in practice.

This definitively requires research and feedback from implementors.

Best regards, Julian