@scott it's about the individual statements inside documents.
-
@scott it's about the individual statements inside documents. the point is to move away from the document model so that it stops mattering where the fact is stored
say you get a profile and they don't want to make a birthday public. one way is to authenticate who's requesting, then do access control on what they should be able to see. but how do you determine "who should be able to see my birthday"? doing a list of every single identity seems tedious. so you want it to be available upon request
-
@scott it's about the individual statements inside documents. the point is to move away from the document model so that it stops mattering where the fact is stored
say you get a profile and they don't want to make a birthday public. one way is to authenticate who's requesting, then do access control on what they should be able to see. but how do you determine "who should be able to see my birthday"? doing a list of every single identity seems tedious. so you want it to be available upon request
flow 1: "i am a friend of yours and i want your profile" -> "ok, here is my profile including my birthday"
flow 2: "i want to know your birthday" -> "ok, here is just my birthday and no other information"
