mirrors/fep
1
0
Fork 0
mirror of https://codeberg.org/fediverse/fep.git synced 2026-08-05 11:46:04 +00:00
Code Packages Wiki Activity

FEP-c7d3: Authorization & same origin (#380)

Browse Source 
Reviewed-on: https://codeberg.org/fediverse/fep/pulls/380
Co-authored-by: silverpill <silverpill@firemail.cc>
Co-committed-by: silverpill <silverpill@firemail.cc>
This commit is contained in:
silverpill
2024-08-11 14:22:49 +00:00
committed by silverpill
parent 83f561c881
commit 75f4511c10
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fep/c7d3/fep-c7d3.md
+7 -3
View File
@@ -63,12 +63,16 @@ Collections without an `attributedTo` property are owned by the server. Unattrib
## Authorization
The actor that creates the object MUST be its owner. If activity modifies or deletes the object, its owner MUST match the object's owner.
The actor that creates the object MUST be its owner.
If activity modifies or deletes an object, its owner SHOULD match the object's owner. If owners are different, their IDs MUST have the same origin.
Examples:
- `Create`, `Update` and `Delete` activities, and objects indicated by their `object` property MUST have the same owner.
- `Add` and `Remove` activities, and objects indicated by their `target` property MUST have the same owner.
- `Create`, `Update` and `Delete` activities, and objects indicated by their `object` property SHOULD have the same owner.
- `Undo` activity and object indicated by its `object` property SHOULD have the same owner.
- `Add` and `Remove` activities, and objects indicated by their `target` property SHOULD have the same owner.
- `Announce` and `Like` activities don't modify objects indicated by their `object` property, therefore their owners can be different.
## Implementation notes