[cgiapp] Re: what i'd like to be doing: new authn/authz thoughts

Michael Peters mpeters at plusthree.com
Fri Oct 19 19:44:07 EDT 2007


A. Pagaltzis wrote:

> Because there’s not a single user in the system to which you gain
> access using $N different credentials. There are $N different
> users, and so each of them should have their own URI. It’s simply
> good REST design: don’t conflate multiple resources behind a
> single URI. It robs you of the opportunity to refer to any one
> of them in its own right.

I completely agree. What I was saying was that the URL shouldn't reflect who is
logged in, but what resource you are viewing.

-- 
Michael Peters
Developer
Plus Three, LP



More information about the cgiapp mailing list