method
Click on the red underlined text to get to the source
... (such as an HTTP or WebDAV method) to a resource for execution, the
server evaluates the ACEs in the ACL ...
... user name, job title, etc. Two separate searches are supported, both
via the REPORT method, one to search principal resources
...
... HTTP and WebDAV
methods are described in the remainder of Section 7. The access
control setting method, ACL ...
... methods are described in the remainder of Section 7. The access
control setting method, ACL, is specified in Section 8. Four reports
that provide limited server-side ...
... A "protected property" is one whose value cannot be updated except
by a method explicitly defined as updating that specific property.
In particular, a protected property cannot be updated with a
...
...
Ability to perform a given method on a resource MUST be controlled by
one or more privileges. Authors of protocol extensions ...
... protocol extensions that define
new HTTP methods SHOULD specify which privileges (by defining new
privileges ...
... privileges, or mapping to ones below) are required to perform the
method. A principal with no privileges to a resource MUST be denied
...
...
The read privilege controls methods that return information about the
state of the resource, including the resource's properties. Affected
...
... state of the resource, including the resource's properties. Affected
methods include GET and PROPFIND. Any implementation-defined
...
...
The write privilege controls methods that lock a resource or modify
the content, dead properties, or (in the case of a collection)
membership of the resource, such as PUT and PROPPATCH ...
... implementation-defined privilege that also controls access to methods
modifying content, dead properties or collection membership must be
aggregated under DAV ...
... The DAV:write-properties privilege controls methods that modify the
dead properties of the resource, such as PROPPATCH. Whether this
...
... implementation-defined
privilege that also controls access to methods modifying dead
properties must be aggregated under DAV:write-properties - e.g., if
...
... The DAV:write-content privilege controls methods that modify the
content of an existing resource, such as PUT. Any implementation-
defined privilege ...
... The DAV:unlock privilege controls the use of the UNLOCK method by a
principal other than the lock owner (the principal ...
... DAV:write-acl privilege controls use of the ACL method to modify
the DAV:acl property of the resource.
...
... The DAV:bind privilege allows a method to add a new member URL to the
specified collection (for example via PUT or MKCOL). It is ignored
...
... Access control properties may be retrieved just like
other WebDAV properties, using the PROPFIND method. Since it is
expensive, for many servers, to retrieve access control information,
...
... ACE of each resource that inherits that ACE. The
method by which ACLs are initialized or by which ACEs are inherited
...
... tries to set an ACL via the ACL method, the server may reject the
attempt to set the ACL as specified. The following properties
...
... The following example shows how access control information can be
retrieved by using the PROPFIND method to fetch the values of the
DAV:owner, DAV ...
... Access Control and existing methods ...
... This section defines the impact of access control functionality on
existing methods.
...
... WebDAV ACL mechanism requires the usage of HTTP method
"preconditions" as described in section 1.6 of RFC3253prop for ALL HTTP ...
... DAV:need-privileges. If an HTTP method fails due to insufficient
privileges, the response body to the "403 Forbidden" error MUST
...
... privilege ) >
Since some methods require multiple permissions on multiple
resources, this information is needed to resolve any ambiguity.
There is no requirement ...
... access control and that /foo.html can have its access
control list modified by the ACL method.
...
... Access Control Methods ...
... DAV:acl property) of a resource. Specifically, the ACL
method only permits modification to ACEs that are not inherited, and
are not protected. An ACL ...
... ACEs that are not inherited, and
are not protected. An ACL method invocation modifies all non-
inherited and non-protected ACEs in a resource's access control list ...
... access control list. To accomplish this, a
client uses the PROPFIND method to retrieve the value of the
DAV:acl property, then parses the returned access control list ...
... URL http://www.example.com/
users/esedlar is the owner of the resource. The ACL method
invocation fails because the submitted ACE conflicts with the
...
... REPORT Method ...
...
The REPORT method (defined in Section 3.6 of [RFC3253]) provides an
extensible mechanism for obtaining information about a resource.
...
... RFC3253]) provides an
extensible mechanism for obtaining information about a resource.
Unlike the PROPFIND method, which returns the value of one or more
named properties, the REPORT method can involve more complex
...
... Unlike the PROPFIND method, which returns the value of one or more
named properties, the REPORT method can involve more complex
processing. REPORT is valuable in cases where the server has access
to all of the information needed to perform the complex request (such
...
... caseless searching. One of the benefits of leaving the search
method to the discretion of the server implementation is the
default LDAP attribute search ...
... vulnerable state, such as being world-writable. In particular, the
property retrieval method PROPFIND, executed with Depth infinity on
an entire hierarchy, is a very efficient way to retrieve the DAV ...
...
The following table of WebDAV methods (as defined in RFC 2518prop, 2616,
and 3253) clarifies which privileges ...
... and 3253) clarifies which privileges are required for access for each
method. Note that the privileges listed, if denied, MUST cause
access to be denied. However, given that a specific implementation
...
... MAY define an additional custom privilege to control access to
existing methods, having all of the indicated privileges does not
mean that access will be granted. Note that lack of the indicated
...
...
+---------------------------------+---------------------------------+
| METHOD | PRIVILEGES |
+---------------------------------+---------------------------------+
...