[cgiapp] Re: what i'd like to be doing: new authn/authz thoughts
Michael Peters
mpeters at plusthree.com
Fri Oct 19 19:44:07 EDT 2007
A. Pagaltzis wrote:
> Because there’s not a single user in the system to which you gain
> access using $N different credentials. There are $N different
> users, and so each of them should have their own URI. It’s simply
> good REST design: don’t conflate multiple resources behind a
> single URI. It robs you of the opportunity to refer to any one
> of them in its own right.
I completely agree. What I was saying was that the URL shouldn't reflect who is
logged in, but what resource you are viewing.
--
Michael Peters
Developer
Plus Three, LP
More information about the cgiapp
mailing list