I am an employee of MemberCo.
MemberCo is a member of W3C.
MemberCo has GET access to http://www.w3.org/Member/.
I (therefor) have access to http://www.w3.org/Member/.
MemberCo's document employList lists me as an employee.
W3C'c member list includes MemberCo.
The ACLs for http://www.w3.org/Member/ assert that employees of members have GET access.
MemberCo's document employList is signed by a private key that W3C trusts to make such assertions.
W3C'c member list is trusted by the access control mechansim.
The ACLs for http://www.w3.org/Member/ were set by an agent trusted by the access control mechanism.
24 of 26 |