Re: [mile] Working group last call for ROLIE

["Schmidt, Charles M." <[e-mail]>]

Hi Stephen,

Thanks for the response. I have one follow-up to your follow-up:

> > Section 5.1.1
> > - Bullet 1: "I'm confused by this recommendation. If a Workspace contained
> a
> > mix of public and private data, would it not be possible to hide the private
> > data in that case? What about the case where you have multiple levels of
> > access for private data - should each level have its own workspace? I'm
> > assuming ROLIE supports highly granular access controls, so the "separate
> > workspace for public and private data so that private data can be hidden"
> > seems like it fails to encompass the versatility that people will want to
> have."
> 
> We've provided this just as a recommendation because there are a couple
> way to handle the situation. You certainly could hide each collection
> independently, you could even hide entries individually. By moving the
> authentication check to the highest level available you avoid potential
> performance issues and reduce the attack surface.

This makes sense. I think my confusion was that it sounded to me like you were saying that people SHOULD follow this design choice because this was *the* way to control visibility of the content. Based on your response, it sounds like you are citing this as one way to effectively manage visibility, but it is not the only way. I wonder if it might be clearer if instead of saying "It is RECOMMENDED that public and private Collections be segregated into different Workspaces" the document could say, "One way of efficiently controlling visibility of continent is to have public and private Collections be segregated into different Workspaces." Maybe you could further drive home that ROLIE is not tied to this model by appending "ROLIE supports other ways of organizing Collections and because ROLIE supports fine-grained access control, owners can control visibility of content regardless of how Collections are organized." 

Does this make sense?

Thanks,
Charles