Adding objects to someone else's collection

[strugee]

E.g. if two people are collaborating on a collection, one of them will need to be able to grant the other access to modify said collection. Seems to me like we could extend Collection to have a notion of "write access" which would explicitly grant other actors the ability to change stuff. Otherwise the default would be what it is right now, that is, "you can't modify it unless you own it."

[strugee]

Thanks to saranix on IRC for raising this usecase.

[ghost]

Was already considering doing this to support our existing notions of forum posting, sourced channels, and wall-to-wall posts. For instance to post to a forum, you would post to the forum's outbox. The difficulty in the protocol definition is how to signal this permission in advance without resorting to trial and error.

[ThisIsMissEm]

In general, as I understand it, the ActivityPub permissions model is centered around the owner having full control, so perhaps one way to implement this would be to Propose the addition via Offer which is then Accept'd or Reject'd by the owner of that collection. (whether manually or automatically)

[TallTed]

Also note that append permissions may need different treatment than write and/or delete, all of which may be necessary (along with the probably obvious read, and possibly more) for such collaborative collection management.