[scim] Setting a mutability value such as readOnly or readWrite for whole SCIM resources

[Hans-Joerg Happel <[e-mail]>]

Hi,

RFC 7643 allows to define a "mutability" to SCIM resource attributes to 
express if a certain attribute is, e.g., readOnly, readWrite, or writeOnly.

We've some cases where we would like to have a "mutability" value 
assigned to whole SCIM resources instead of attributes only (This might 
also be a relevant feature in the light of the discussion at the recent 
SCIM interim about multiple different SCIM "actors" interacting).

As far as I see, this is not possible based on the current spec. So some 
workaround for an SCIM endpoint right now might just be to return some 
error code on HTTP level [2], if, e.g., a request tries to write a 
resource which cannot be written for some reason.

However, perhaps I am missing something here?

Otherwise, this might be a candidate for a rfc7643bis. Is there already 
a place where we track issues for those?

Thanks and best,
Hans-Joerg

ps.: In addition, the (im)mutability of  SCIM "service provider 
configuration" endpoints (/ServiceProviderConfig, Schemas and 
/ResourceTypes) seems to be rather implicitly specified currently 
(https://datatracker.ietf.org/doc/html/rfc7644#section-4): "SCIM defines 
three endpoints to facilitate discovery of SCIM service provider 
features and schema that MAY be retrieved using HTTP GET:"

[1] https://datatracker.ietf.org/doc/html/rfc7643#section-2-2
[2] https://datatracker.ietf.org/doc/html/rfc7644#section-3.2