Last Call comments on draft-sanchez-webdav-current-principal-01
Julian Reschke <julian.reschke <at> gmx.de>
2008-07-25 13:07:40 GMT
this is a good proposal and I support publication as a Proposed Standard.
Below are some comments, mostly editorial:
> This specification defines a new WebDAV property that allows clients
> to quickly determine the principal corresponding to the current
> authenticated user.
Nit: Expand WebDAV acronym on first use.
> Some clients have a need to determine the [RFC3744] principal that a
> server is associating with the currently authenticated HTTP user.
> While [RFC3744] defines a DAV:current-user-privilege-set property for
> retrieving the privileges granted to that principal, there is no
> recommended way to do identify the principal in question, which is
> necessary to perform other useful operations. For example, a client
> may wish to determine which groups the current user is a member of,
> or modify a property of the principal resource associated with the
> current user.
Nit: say "WebDAV ACL" instead of "[RFC3744]" most of the time.
> The DAV:principal-match REPORT provides some useful functionality,
> but there are common situations where the results from that query can
> be ambiguous (e.g. not only is an individual user principal returned,
> but also every group principal that the user is a member of, and