Apologies for jumping into discussion late, but one thing puzzled me below.
“In our last discussion that originated #355, you mentioned the "Adrian Clause". This is exactly what we are trying to achieve with this extension to permission endpoint, even if an RPT provides sufficient permissions for a particular case, the resource server can choose to bar access based on its own criteria. Where the criteria can be based on information from runtime or some external service. I think this also allows the RS to provide some "claims gathering" flow on its side, prior to issuing a permission ticket. It should also allow the AS to present to the resource owner more details on what he is approving.”
Do you rather mean, prior to sending a permission request to AS (and obtaining a permission ticket from it), the RS does some claim gathering? Does the RS do additional access control before registering permission with the client? Are permission requests generated regardless of the state of the claims?
Thanks,
--Cigdem
Cigdem Sengul, PhD
Senior Researcher
[/Users/cigdem/Library/Containers/com.microsoft.Outlook/Data/Library/Caches/Signatures/signature_21833989]
Websitehttp://www.nominet.uk/ | Twitterhttps://twitter.com/Nominet | Facebookhttps://www.facebook.com/nominet/
DD: +44 (0)1865 332256 E: cigdem.sengul@nominet.uk
Minerva House, Edmund Halley Road, Oxford Science Park, Oxford, OX4 4DQ, United Kingdom
Nominet UK. Registered in England and Wales No. 3203859
This message is intended exclusively for the individual(s) to whom it is addressed and may contain information that is privileged, or confidential. If you are not the addressee, you must not read, use or disclose the contents of this e-mail. If you receive this e-mail in error, please advise us immediately and delete the e-mail. Nominet UK has taken every reasonable precaution to ensure that any attachment to this e-mail has been swept for viruses. However, Nominet cannot accept liability for any damage sustained as a result of software viruses and would advise that you carry out your own virus checks before opening any attachment.
On Thu, Aug 9, 2018 at 2:45 PM, Eve Maler