Re: [ogpx] Protocol for permitting policy decisions

[Meadhbh Hamrick <[e-mail]>]

the way that my employer plans to deploy AD's and RD's is that the AD
will be the entity that has a relationship with the user. _it_ is
responsible for ensuring that the little ones don't run afoul of the
local obscenity regulations, because _it_ is the one that provides
access to the regions.

we _could_ say that it's the region's responsibility to know the agent
domain's policy, and that the region needs to block access to the user
when the agent domain tells it that the user in question is underage,
but that's the scenario we were trying to avoid: leaking information
about the user to the region domain. also, i think under current US
law, this might change the relationship between the RD and the AD with
respect to the nature of agency between the two. but, IANAL, so i'm
not an expert on that topic.

but at the end of the day, if i'm an agent domain, and i have a user
whom i know is 15 and a US resident, i would really like to make the
decision myself about whether i even want to start rezzing the user's
avatar in a region. and to make that decision, i will want to know
what the region's maturity level is set to.

-cheers
-meadhbh / infinity

On Wed, Oct 7, 2009 at 6:17 PM, Dickson, Mike (ISS Software)
<[e-mail]> wrote:
> Meadbah wrote:
>
>
>
> i still like this scheme because a) it's really similar to the way
>
> seed caps work, b) it adds flexibility to our system(s), and c) it
>
> does what i was hoping... gives the AD the ability to make policy
>
> decisions (like am i going to let this 15 year old user access
>
> material that may land me in hot water with the local authorities.)
>
>
>
> I may be mis-understanding all this since I’m still trying to come up to
> speed but isn’t it the region that’s making the policy decision here to
> allow/disallow a connect given what AD is representing about the user?  And
> yes, I agree that for this to work there must be trust established between
> the services involved.  I’m just confused by the above statement since it
> implies the AD is making a policy decision while it’s really the RD that has
> the content (and hence the possible issue).  And the RD and AD may be run by
> two different entities….
>
>
>
> Mike
>
>