mirrors/fep
1
0
Fork 0
mirror of https://codeberg.org/fediverse/fep.git synced 2026-08-05 19:55:46 +00:00
Code Packages Wiki Activity

FEP-9f9f: Update proposal (#811)

Browse Source 
- Clarified when embedded collections are not allowed.
- Clarified what is meant by collection contents.
- Updated access control section.

Reviewed-on: https://codeberg.org/fediverse/fep/pulls/811
Co-authored-by: silverpill <silverpill@firemail.cc>
Co-committed-by: silverpill <silverpill@firemail.cc>
This commit is contained in:
silverpill
2026-04-04 15:28:59 +02:00
committed by silverpill
parent 9e52c75858
commit e58c2d457f
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
fep/9f9f/fep-9f9f.md
+4 -4
View File
@@ -41,13 +41,13 @@ Some special collections, such as `inbox` and `outbox` are created automatically
Servers MAY create collections automatically when the `object` of `Create` activity contains a property that points to a collection, such as `likes`, `shares` or `replies`. When the specified collection ID is local, the server MUST verify that the ID is valid, and MAY assign a different ID.
Clients MUST NOT embed non-anonymous collections in objects.
Clients MUST NOT attempt to create new collections by embedding non-anonymous collections in objects.
Collection IDs SHOULD NOT contain query parameters.
## Updating collections
The contents of a collection are modified either directly by `Add`, `Remove` and `Move` activities, or indirectly by side-effects of other activities.
The contents of a collection (its items) are modified either directly by `Add`, `Remove` and `Move` activities, or indirectly by side-effects of other activities.
A client can update other properties of a collection by generating an `Update` activity. The server MUST NOT overwrite reserved collection properties such as `items`, `totalItems` and pagination properties.
@@ -76,9 +76,9 @@ Collection page IDs are usually created by appending query parameters to a colle
## Access control
Collections SHOULD be filtered based on the permissions of a user.
Collection items MUST be filtered based on the permissions of an actor that tries to access the collection. If the actor is not authorized, only public items are returned.
However, a collection itself usually doesn't have an audience and is treated as public by default.
A collection itself often doesn't have an audience and is treated as public by default. However, if the audience is specified, regular access control procedures MUST be used.
## Addressing