Notice: this Wiki will be going read only early in 2024 and edits will no longer be possible. Please see: https://gitlab.eclipse.org/eclipsefdn/helpdesk/-/wikis/Wiki-shutdown-plan for the plan.
Difference between revisions of "Context"
(→Examples) |
(→In IdAS) |
||
| Line 23: | Line 23: | ||
== In IdAS == | == In IdAS == | ||
| − | IdAS consumers must be able to provide the required | + | IdAS consumers must be able to provide the required authentication materials to "open" i.e. authenticate to a [[Context]]. Once opened, the contents of the [[Context]] can be searched, read and updated to varying extents based on the authorization policy of the [[Context]]. |
==Footnote== | ==Footnote== | ||
Revision as of 01:39, 2 February 2008
Introduction
This page describes the Context concept.
Definition
- A Context is a set of one or more I-Nodes identified by a ContextId.
- Each Context is an instance of a Context Type.
- A Context may have zero or more Attributes.
- A Context has a schema that describes kinds of I-Nodes and Attributes that an instance of this Context contains.
- Each Context has its own security and access control policy
Examples
Examples of Contexts that contain multiple I-Nodes include: directories, informal groups, project teams, collaboration spaces, and communications systems and networks. Examples of Contexts that, at least from the point of view of the authenticated consumer, typically contain only a single I-Node are: driver's licenses, credit cards, business cards, and many other kinds of security devices.
HOWL
<owl:Class rdf:ID="Context">
<rdfs:comment>
This instance represents the containing Context itself.
</rdfs:comment>
</owl:Class>
In IdAS
IdAS consumers must be able to provide the required authentication materials to "open" i.e. authenticate to a Context. Once opened, the contents of the Context can be searched, read and updated to varying extents based on the authorization policy of the Context.
Footnote
Some Contexts are abstract. An example of an abstract Context would be the internet mail Context associated with the internet mail ContextId. The I-Nodes within this Context have a I-NodeId that is an email address (e.g. "foo@boo.com") within the email namespace defined by internet mail. This ContextId cannot be resolved to a physical Context because there is no globally defined set of all email addresses.