Access Management¶

The access command is used to manage access of resources on a Solid pod. Solid has two competing authorization proposals, Web Access Controls that use .acl resources, and Access Control Policies that use .acp resources.

Bashlib implements full support for the management of WAC resources, and partial support for the management of ACP resources using the Inrupt universalAccess libraries.
The access command has thee subcommands: list, set and delete

List¶

The list subcommand provides a listing of all access information for the targeted (container) resource.

arguments¶

Arguments:
  url            Resource URL

The url argument is the target (container) resource for which access is to be listed.

options¶

Options:
  --acl          Displays ACL specific information such as group and default access
  -p, --pretty   Pretty format
  -v, --verbose  Log all operations

The --acl option displays information specific to .acl resources, such as default access indicating that the authorization is also enforced on child resources without their own .acl file or inhereted access indicating that the access rules are derived from the default access of a parent resource.
The --pretty option outputs the information in a table format
The --verbose option outputs operation logs.

examples¶

List the pod root access in a pretty format

sld access list --pretty https://mypod.org/

Set¶

The set subcommand is used to edit resource access.

arguments¶

Arguments:
  url            Resource URL
  permissions    Permission format when setting permissions. 
        Format according to id=[a][c][r][w]. 
        For public permissions please set id to "p". 
        For the current authenticated user please set id to "u".
        For specific agents, set id to be the agent webid.

The url argument is the target (container) resource for editing access rules.
The permissions argument is a formatted string containing the identifier for which rules are defined, and the associated permissions that are to be set for the given identifier. Using p as the identifier targets public permissions and using u as the identifier targets the current WebID of the authenticated Bashlib session.
The a is append rights, allowing PATCH operations to be made.
The c is control rights, allowing the editing of access controls for a resource (for ACP this includes both readControl and writeControl)
The r is read rights, allowing a GET request to a resource.
The p is write rights. For a resource this allows it to be overwritten using a PUT request. For a container this allows resources to be added using both PUT and POST requests.

options¶

Options:
  --acl          Enables ACL specific operations --default and --group
  --default      Set the defined permissions as default (only in --acl mode)
  --group        Process identifier as a group identifier (only in --acl mode)
  -v, --verbose  Log all operations
  -h, --help     display help for command

The --acl option enables the default and group flags to be used, which are WAC specific operations.
The --default option makes the current access rules default for all children resources when defined on a container. Only available in --acl mode.
The --group option indicates that the identifier represents a group identifier. Only available in --acl mode.
The --verbose option outputs operation logs.

examples¶

Setting public read permissions for a resource

sld access set https://mypod.org/resource p=r

Giving access to alice to write to a container

sld access set http://mypod.org/container/ http://people.org/alice/webid=w

Delete¶

The delete subcommand is only available for WAC based pods using .acl resources. Note that removing a resource using the rm command also removes the associated .acl resource on the CSS automatically.

arguments¶

Arguments:
  url            Resource URL

The url argument is the target .acl resource that will be deleted.

options¶

Options:
  -v, --verbose  Log all operations

The --verbose option output operation logs.

example¶

Removing an acl resource.

sld access remove https://mypod.org/resource.acl