Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Should .user include the full "extended profile" data? #26

Open
JordanShurmer opened this issue Jun 5, 2019 · 1 comment
Open

Should .user include the full "extended profile" data? #26

JordanShurmer opened this issue Jun 5, 2019 · 1 comment
Labels
question Further information is requested

Comments

@JordanShurmer
Copy link

This is more of a proposal than an actual issue.

The Solid Data Discovery documentation describes the following process for discovering where a user's data you care about exists:

  1. Start with the WebID URI.
  2. Use it to fetch the WebID Profile Document.
  3. Parse the profile and load the other Extended Profile resources, which includes the Preferences file and any owl:sameAs and rdfs:seeAlso links.
  4. From the Extended Profile, extract the registry links (the solid:publicTypeIndex predicate link to the public Listed Type Index registry, and the solid:privateTypeIndex predicate link to the private Unlisted Type Index registry).
  5. Load one or both of the Type Index registry documents, as appropriate, and query them for the location of RDF Types that the app cares about.

However (assuming I'm groking things correctly), the user object that query-ldflex provides is only the data directly from the Profile Document, not including the "Extended" Profile data.

So, should query-ldflex populate the user object from the Extended Profile? In other words: Should user include step 3 in the above process?

@jaxoncreed jaxoncreed added the feature A new feature to be added label Jun 5, 2019
@RubenVerborgh RubenVerborgh added question Further information is requested and removed feature A new feature to be added labels Jun 6, 2019
@RubenVerborgh
Copy link
Member

By default, LDflex will indeed only query the one document corresponding to the URL of the entity. For example, data[https://ruben.verborgh.org/profile/#me] will only read data from https://ruben.verborgh.org/profile/.

This is by design, and this is an important security/trust/provenance feature. With Linked Data, anyone can say anything about anything, so we cannot just pull in data from arbitrary documents. I actually think that the Extended Profile is a security problem and have filed an issue solid/solid-spec#189.

Which documents are allowed to be loaded, could/should be specific in a data shape on the pod (this is future work). But indeed, it does make sense in several cases to find data in multiple documents.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

3 participants