Hilarie Orman wrote:
Well, the local system can actually override anything that
violates local policy, and if the local policy forbids download
from the alternative site, it doesn't have to execute that
action.
Hm, ok, but in this case one has to make sure that the user (i.e.
content provider or content consumer) is aware of local policy and
accepts it (otherwise the user might decide to not use the service).
It must not happen that local policy changes the behavior in a way
that was not intended by the user who authorized the service.
Your example, though, has rules for individual users
connected with failure of the service, and that's a more
complicated situation. The original rules were presumably
put there on behalf of the virus scanning service, in order
to quickly determine what content needs scanning and
which doesn't. Your scenario proposes that each user can
attach individual "on failure" actions to that service, and
I'd be concerned about getting too many user-specific
rules tied into the dispatch database.
Yup, I share your concerns about too many user-sepcific rules, good
point. However, I'd suspect that there won't be too many different
alternative actions for failure cases, so users could chose which
alternative they would like and could subscribe to the corresponding
tuple of servive and failure action.
For example, there might be a virus scanning service and two possible
actions in case of a failure: (a) deliver file without scanning, and
(b) block unscanned files. Subscribers to the virus scanning service
would have to pick one of the alternatives, and depending on their
choice, they would be included in either group A (virus scanning
subscriber with failure alternative (a)) or group B (virus scanning
subscriber with failure alternative (b)). We could then have two rules
like "if user is in A, do virus scanning and in case of failure
deliver content" and "if user is in B, do virus scanning and in case
of failure block content".
This means that users cannot necessarily attach individual "on
failure" cases, but can chose from a given set of alternatives.
-Markus