Re: About JENA-2339 - security related

2022-08-26 Thread Vilnis Termanis
> It does address individual graphs. >From my understanding (correct me if I'm wrong): The Evaluator interface exposes the graph which could be checked against but jena-permissions is currently limited to a single graph/model, not a whole dataset. (I appreciate it could be extended to support the

Re: About JENA-2339 - security related

2022-08-26 Thread Vilnis Termanis
(Apologies for the delay - I've been busy at work with other stuff) On Mon, 15 Aug 2022 at 14:27, Andy Seaborne wrote: > > There is one Jena user - it's Vilnis (for Iotics). > > Your use cases - whatever they are - are for the current product and > will evolve. Whether the way you propose will su

Re: About JENA-2339 - security related

2022-08-24 Thread Claude Warren
I am sorry that I am coming to this _VERY_ late. I don't understand why Permissions can not be used. It does address individual graphs. It does handle union graphs properly. It does handle the difference between graph update and model update. It calls back to the Security engine to effectively

Re: About JENA-2339 - security related

2022-08-15 Thread Andy Seaborne
There is one Jena user - it's Vilnis (for Iotics). Your use cases - whatever they are - are for the current product and will evolve. Whether the way you propose will support the evolution of the use cases in the future, say the next 5 years, is unclear (and I think quite unlikely both on secur

Re: About JENA-2339 - security related

2022-08-08 Thread Martynas Jusevičius
On Mon, 8 Aug 2022 at 18.06, Vilnis Termanis wrote: > On Mon, 1 Aug 2022 at 12:29, Andy Seaborne wrote: > > > > > > > > On 28/07/2022 20:50, Vilnis Termanis wrote: > > > Hi Andy & Jena development community, > > > > > > (Answers inline - apologies if I repeat myself) > > > > > > FYI - Our aim is

Re: About JENA-2339 - security related

2022-08-08 Thread Martynas Jusevičius
On Mon, 8 Aug 2022 at 17.21, Vilnis Termanis wrote: > On Sat, 30 Jul 2022 at 21:14, Martynas Jusevičius > wrote: > > > > On Fri, Jul 29, 2022 at 7:27 PM Vilnis Termanis > > wrote: > > > > > > (inline) > > > > > > On Fri, 29 Jul 2022 at 07:56, Martynas Jusevičius > > > wrote: > > > > > > > > “S

Re: About JENA-2339 - security related

2022-08-08 Thread Vilnis Termanis
On Mon, 1 Aug 2022 at 12:29, Andy Seaborne wrote: > > > > On 28/07/2022 20:50, Vilnis Termanis wrote: > > Hi Andy & Jena development community, > > > > (Answers inline - apologies if I repeat myself) > > > > FYI - Our aim is to enable end-users to make SPARQL queries whilst > > respecting visibili

Re: About JENA-2339 - security related

2022-08-08 Thread Vilnis Termanis
On Sat, 30 Jul 2022 at 21:14, Martynas Jusevičius wrote: > > On Fri, Jul 29, 2022 at 7:27 PM Vilnis Termanis > wrote: > > > > (inline) > > > > On Fri, 29 Jul 2022 at 07:56, Martynas Jusevičius > > wrote: > > > > > > “Sets of triples” — aren’t these datasets? > > > > > > Couldn’t this use case be

Re: About JENA-2339 - security related

2022-08-01 Thread Andy Seaborne
On 30/07/2022 21:14, Martynas Jusevičius wrote: On Fri, Jul 29, 2022 at 7:27 PM Vilnis Termanis wrote: (inline) On Fri, 29 Jul 2022 at 07:56, Martynas Jusevičius wrote: “Sets of triples” — aren’t these datasets? Couldn’t this use case be addressed by maintaining per-user datasets? Not

Re: About JENA-2339 - security related

2022-08-01 Thread Andy Seaborne
On 28/07/2022 20:50, Vilnis Termanis wrote: Hi Andy & Jena development community, (Answers inline - apologies if I repeat myself) FYI - Our aim is to enable end-users to make SPARQL queries whilst respecting visibility restrictions. I.e. users (indirectly) add sets of related triples to a da

Re: About JENA-2339 - security related

2022-07-30 Thread Martynas Jusevičius
On Fri, Jul 29, 2022 at 7:27 PM Vilnis Termanis wrote: > > (inline) > > On Fri, 29 Jul 2022 at 07:56, Martynas Jusevičius > wrote: > > > > “Sets of triples” — aren’t these datasets? > > > > Couldn’t this use case be addressed by maintaining per-user datasets? Not > > sure if Fuseki can create dat

Re: About JENA-2339 - security related

2022-07-29 Thread Vilnis Termanis
(inline) On Fri, 29 Jul 2022 at 07:56, Martynas Jusevičius wrote: > > “Sets of triples” — aren’t these datasets? > > Couldn’t this use case be addressed by maintaining per-user datasets? Not > sure if Fuseki can create datasets on the fly, but this seems like a much > simpler feature to implement

Re: About JENA-2339 - security related

2022-07-29 Thread Andy Seaborne
On 29/07/2022 07:56, Martynas Jusevičius wrote: “Sets of triples” — aren’t these datasets? Couldn’t this use case be addressed by maintaining per-user datasets? Not sure if Fuseki can create datasets on the fly, Yes, it can - and remove them. That's what the UI does for "create dataset", "

Re: About JENA-2339 - security related

2022-07-28 Thread Martynas Jusevičius
“Sets of triples” — aren’t these datasets? Couldn’t this use case be addressed by maintaining per-user datasets? Not sure if Fuseki can create datasets on the fly, but this seems like a much simpler feature to implement compared to a whole new ACL mechanism. On Thu, 28 Jul 2022 at 22.51, Vilnis T

Re: About JENA-2339 - security related

2022-07-28 Thread Vilnis Termanis
Hi Andy & Jena development community, (Answers inline - apologies if I repeat myself) FYI - Our aim is to enable end-users to make SPARQL queries whilst respecting visibility restrictions. I.e. users (indirectly) add sets of related triples to a dataset and they can choose who has visibility (bey

About JENA-2339 - security related

2022-07-28 Thread Andy Seaborne
JENA-2339 PR#1441 https://github.com/vtermanis/jena/blob/dynamic-graph-restriction-extension/MOVE_ME_DynamicACL_notes.md tl;dr: It is a different role for Fuseki. Fuseki execute the security but the setup and control is from a trusted external server on the request execution path. It assumes