Proposal: Strict ACL validation such that agents can detect and reject unsupported ACLs

[RubenVerborgh]

No description provided.

[justinwb]

👍 to this. @RubenVerborgh can you confirm whether this use case supports this proposal, and/or whether you would see the need for expansion or adjustment?

[elf-pavlik]

I propose that agents should validate ACL documents against a strict shape before trying to enforce or modify them.a

I think currently the storage (Resource Server) enforces access control rules. We should avoid situations where storage would accept access control rules if it is not capable to fully enforce those rules. In that case only check on create (including restoring data from backup) or update seems needed.

[csarven]

This is part of a recurring issue. See solid/specification#169 . But I'm not sure if this panel is observing the issues in solid/specification.