Network Working Group | A. Brown |
Internet-Draft | G. Clemm |
Intended status: Informational | IBM |
Expires: July 16, 2010 | J. Reschke, Editor |
greenbytes | |
January 12, 2010 |
This specification defines Atom link relations for navigation between a resource and its versions.¶
This Internet-Draft is submitted to IETF in full conformance with the provisions of BCP 78 and BCP 79.¶
Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet-Drafts.¶
Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as “work in progress”.¶
The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt.¶
The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html.¶
This Internet-Draft will expire on July 16, 2010.¶
Copyright (c) 2010 IETF Trust and the persons identified as the document authors. All rights reserved.¶
This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the BSD License.¶
Please send comments to the Atom Syntax mailing list (<http://www.imc.org/atom-syntax/>).¶
Note that although discussion takes place on the Atompub working group's mailing list, this is not a working group document.¶
XML versions, latest edits and the issues list for this document are available from <http://greenbytes.de/tech/webdav/#draft-brown-versioning-link-relations>.¶
I edit (type: edit, status: closed) | ||
julian.reschke@greenbytes.de | 2009-11-19 | Umbrella issue for editorial fixes/enhancements. |
Associated changes in this document: A.1, B. |
This specification defines link relations that may be used on a resource that exists in a system that supports versioning to navigate among the different resources available, such as past versions.¶
These link relations are used in the AtomPub ([RFC5023]) bindings of the "Content Management Interoperability Services" (CMIS). See Section 3.4.3.1 of [CMIS] for further information.¶
Versioned Resource ¶
Version History ¶
Predecessor, Successor ¶
Working Copy ¶
Checkout ¶
Checkin ¶
The following link relations are defined:¶
When included on a versioned resource, this link points to a resource containing the version history for this resource.¶
When included on a versioned resource, this link points to a resource containing the latest (e.g., current) version.¶
The latest version is defined by the system. For linear versioning systems, this is probably the latest version by timestamp. For systems that support branching, there will be multiple latest versions, one for each branch in the version history.¶
Some systems may allow multiple of these link relations.¶
When included on a versioned resource, this link points to a working copy for this resource.¶
Some systems may allow multiple of these link relations.¶
When included on a working copy, this link points to the versioned resource from which this working copy was obtained.¶
When included on a versioned resource, this link points to a resource containing the predecessor version in the version history.¶
Some systems may allow multiple of these link relations in the case of a multiple branches merging.¶
When included on a versioned resource, this link points to a resource containing the successor version in the version history.¶
Some systems may allow multiple of these link relations in order to support branching.¶
The link relations below are to be registered by IANA per Section 7.1 of [RFC4287]:¶
version-history
See Section 3.1.
Undefined; this relation can be used for background processing or to provide extended functionality without displaying its value.
See Section 5.
latest-version
See Section 3.2.
Undefined; this relation can be used for background processing or to provide extended functionality without displaying its value.
See Section 5.
working-copy
See Section 3.3.
Undefined; this relation can be used for background processing or to provide extended functionality without displaying its value.
See Section 5.
working-copy-of
See Section 3.4.
Undefined; this relation can be used for background processing or to provide extended functionality without displaying its value.
See Section 5.
predecessor-version
See Section 3.5.
Undefined; this relation can be used for background processing or to provide extended functionality without displaying its value.
See Section 5.
successor-version
See Section 3.6.
Undefined; this relation can be used for background processing or to provide extended functionality without displaying its value.
See Section 5.
I expose-urls (type: change, status: closed) | ||
ekr@networkresonance.com | 2010-01-03 |
In general this mechanism seems sound but I'm not sure that
the security considerations are entirely adequate. This
mechanism lets you learn information about other versions
of a resource even if you potentially don't have permission
to view them directly. Consider a limiting case where each
version of the resource had a name that contained the
change set for that resource. E.g.,
http://example.com/versions/filename/_@line_50_+_FOO;@line_60_+_BAR/; In this case, seeing other parts of the version tree leaks information about those versions. I don't think that this is a problem for the draft, but it might be useful to mention that this feature has implications for name construction. |
2010-01-06 | Resolution:Add that consideration. | |
Associated changes in this document: 5. |
Automated agents should take care when these relations cross administrative domains (e.g., the URI has a different authority than the current document). Such agents should also take care to detect circular references.¶
Care should be applied when versioned resources are subject to differing access policies. In this case, exposing links may leak information even if the linked resource itself is properly secured. In particular, the syntax of the link URI/IRI could expose sensitive information (see Section 16.2 of [RFC3253] for a similar consideration in WebDAV Versioning). Note that this applies to exposing link metadata in general, not only to links related to versioning.
Thanks to the members of Content Management Interoperability Services (CMIS) Technical Committee (TC) at OASIS for the initial proposal, and to Jan Algermissen for feedback during IETF review.¶
The link relations defined in Section 3 correspond to various properties used in WebDAV Versioning [RFC3253] and JCR [JSR-283]:¶
version-history ¶
latest-version ¶
working-copy ¶
working-copy-of ¶
predecessor-version ¶
successor-version ¶
The "Web Linking" specification ([draft-nottingham-http-link-header]) generalizes Atom link relations, and also re-introduces the HTTP "Link" header as a way to expose link relations in HTTP responses. This will make it possible to expose version links independently from a specific vocabulary, be it the Atom Feed Format ([RFC4287]) or WebDAV properties ([RFC3253]).¶
For instance, a response to an VERSION-CONTROL request ([RFC3253], Section 3.5) could expose newly created version-history and checked-in version as link relations:¶
>> Request:
VERSION-CONTROL /docs/test.txt HTTP/1.1 Host: example.net
>> Response:
HTTP/1.1 ↓200 OK204 No Content Link: </system/v/84345634/1>; rel=latest-version; anchor=</docs/test.txt> Link: </system/vh/84345634>; rel=version-history; anchor=</docs/test.txt>
(Note that in this case, the anchor parameter is used, as the response to a VERSION-CONTROL request is not a representation of the resource at the Request-URI)
A subsequent HEAD request on that resource could expose the version-history and latest-version relations as well:¶
>> Request:
HEAD /docs/test.txt HTTP/1.1 Host: example.net
>> Response:
HTTP/1.1 200 OK Content-Type: text/plain; charset=UTF-8 Content-Length: 12345 Link: </system/v/84345634/1>; rel=latest-version Link: </system/vh/84345634>; rel=version-history
After creating more versions, following the latest-version would then expose predecessors of a version:¶
>> Request:
HEAD /system/v/84345634/3 HTTP/1.1 Host: example.net
>> Response:
HTTP/1.1 200 OK Content-Type: text/plain; charset=UTF-8 Content-Length: 12323 Link: </system/v/84345634/2>; rel=predecessor-version
Added Geoff Clemm as author.¶
Renamed link relation "all-versions" to "version-history". Fixed description of "working-resource" relation to state that it appears on a version resource.¶
Rewrite terminology and link relations using simpler definitions that can reflect versioning approaches different from WebDAV.¶
Add JCR/WebDAV property table. And reference to Web Linking draft (for now informative) and examples showing use of the Link header.¶
Add and resolve issue "iana".¶
Fix typo ("working-resource" instead of "working-copy"). Add and resolve issues "checked-out", "cmis" and "working-copy-of".¶
Close issue "working-copy-of", which was really fixed in -04.¶
Fix VERSION-CONTROL example to return 204 (there's no response body). Fix country names in contact information. Add and resolve issue "expose-urls".