# Solid Specification

**URL:** https://forum.solidproject.org/c/solid-specification/34.md?page=1

[Latest](https://forum.solidproject.org/latest.md) · [Categories](https://forum.solidproject.org/categories.md) · [Tags](https://forum.solidproject.org/tags.md)

**Page:** 2

---

## [Why does NSS (OP) return a wrong audience in the id\_token?](https://forum.solidproject.org/t/why-does-nss-op-return-a-wrong-audience-in-the-id-token/3098)

<div class="topic-metadata">

**Author:** [@divoplade](https://forum.solidproject.org/u/divoplade)\
**Replies:** 0\
**Last updated:** [May 23, 2020, 11:33am UTC](https://forum.solidproject.org/t/why-does-nss-op-return-a-wrong-audience-in-the-id-token/3098 "2020-05-23T11:33:59Z")

</div>

I noticed that this topic is useless, you can safely ignore it :slight\_smile:

---

## [User token and security - why SOLID server does not include the origin of the requester in token?](https://forum.solidproject.org/t/user-token-and-security-why-solid-server-does-not-include-the-origin-of-the-requester-in-token/2904)

<div class="topic-metadata">

**Author:** [@walter.almeida](https://forum.solidproject.org/u/walter.almeida)\
**Replies:** 14\
**Last updated:** [May 20, 2020, 9:19pm UTC](https://forum.solidproject.org/t/user-token-and-security-why-solid-server-does-not-include-the-origin-of-the-requester-in-token/2904 "2020-05-20T21:19:31Z")

</div>

I was wondering the following : when I connect to a solid app, I then get a bearer token, stored in the Authorization header. Once I get this token, I can potentially use it anywhere, for instance on a backend server. I …

---

## [How do I request a permission to control a specific resource with my app?](https://forum.solidproject.org/t/how-do-i-request-a-permission-to-control-a-specific-resource-with-my-app/2996)

<div class="topic-metadata">

**Author:** [@divoplade](https://forum.solidproject.org/u/divoplade)\
**Replies:** 19\
**Last updated:** [May 12, 2020, 10:45pm UTC](https://forum.solidproject.org/t/how-do-i-request-a-permission-to-control-a-specific-resource-with-my-app/2996 "2020-05-12T22:45:02Z")

</div>

Hello :slight\_smile: Suppose I have an app that manages a form of contacts. My app manages private resources, but my user will want to share some managed resources with other users. So, my app should change the ACL of…

---

## [App whitelisting](https://forum.solidproject.org/t/app-whitelisting/2995)

<div class="topic-metadata">

**Author:** [@anon36056958](https://forum.solidproject.org/u/anon36056958)\
**Replies:** 12\
**Last updated:** [May 3, 2020, 12:14pm UTC](https://forum.solidproject.org/t/app-whitelisting/2995 "2020-05-03T12:14:53Z")

</div>

and

---

## [Who sent this LDN notification?](https://forum.solidproject.org/t/who-sent-this-ldn-notification/2963)

<div class="topic-metadata">

**Author:** [@divoplade](https://forum.solidproject.org/u/divoplade)\
**Replies:** 10\
**Last updated:** [May 1, 2020, 11:13am UTC](https://forum.solidproject.org/t/who-sent-this-ldn-notification/2963 "2020-05-01T11:13:42Z")

</div>

Hello everyone! As I understand, anyone can publish anything to anyone’s Linked Data Notification inbox. Is this correct? If so, can I know who sent the notification?

---

## [SOLID Server SPARQL Endpoint](https://forum.solidproject.org/t/solid-server-sparql-endpoint/2920)

<div class="topic-metadata">

**Author:** [@walter.almeida](https://forum.solidproject.org/u/walter.almeida)\
**Replies:** 6\
**Last updated:** [April 20, 2020, 3:56pm UTC](https://forum.solidproject.org/t/solid-server-sparql-endpoint/2920 "2020-04-20T15:56:03Z")

</div>

Hey guys ! I am wondering if there is (or if not, if there is it in roadmad?), to have a remote, server side SPARQL endpoint on SOLID POD servers ? At the moment, when I need to query data from a SOLID POD document, I …

---

## [What are Groups in Solid?](https://forum.solidproject.org/t/what-are-groups-in-solid/2928)

<div class="topic-metadata">

**Author:** [@anon36056958](https://forum.solidproject.org/u/anon36056958)\
**Replies:** 2\
**Last updated:** [April 19, 2020, 3:32pm UTC](https://forum.solidproject.org/t/what-are-groups-in-solid/2928 "2020-04-19T15:32:49Z")

</div>

These are just some thoughts about groups used in ACL’s in Solid, and some questions. In Solid, a group is represented as an IRI, which is dereferenced using vcard:hasMember which has a boolean range, true or false. Th…

---

## [Acl $ owner/superuser / solid spec](https://forum.solidproject.org/t/acl-owner-superuser-solid-spec/2902)

<div class="topic-metadata">

**Author:** [@Smag0](https://forum.solidproject.org/u/Smag0)\
**Replies:** 2\
**Last updated:** [April 17, 2020, 8:23am UTC](https://forum.solidproject.org/t/acl-owner-superuser-solid-spec/2902 "2020-04-17T08:23:17Z")

</div>

Some new questions about Acl are pointed recently with the 5.2.4 patch and other questions about who is the owner of a created resource ( the one that own the pod, or the one that created the resource? ) Looking at Acl …

---

## [Automatically grant permissions to the creator of a file?](https://forum.solidproject.org/t/automatically-grant-permissions-to-the-creator-of-a-file/2898)

<div class="topic-metadata">

**Author:** [@anon36056958](https://forum.solidproject.org/u/anon36056958)\
**Replies:** 5\
**Last updated:** [April 14, 2020, 5:42pm UTC](https://forum.solidproject.org/t/automatically-grant-permissions-to-the-creator-of-a-file/2898 "2020-04-14T17:42:33Z")

</div>

Does the creator of a file have no permissions until the pod owner takes action to grant them? Some posts relating to this topic https://gitter.im/solid/chat?at=5e92ba3cd021c45cc7ddffb9

---

## [Complex permissions: a real use case we struggle to cover with ACLs and the current state of Solid standards](https://forum.solidproject.org/t/complex-permissions-a-real-use-case-we-struggle-to-cover-with-acls-and-the-current-state-of-solid-standards/2335)

<div class="topic-metadata">

**Author:** [@alex.bourlier](https://forum.solidproject.org/u/alex.bourlier)\
**Replies:** 20\
**Last updated:** [November 12, 2019, 5:42pm UTC](https://forum.solidproject.org/t/complex-permissions-a-real-use-case-we-struggle-to-cover-with-acls-and-the-current-state-of-solid-standards/2335 "2019-11-12T17:42:43Z")

</div>

Hi, A common use case we struggle to implement with WebACL permissions is the “Follow” or “Like” use case, where a user has the Acl:Add permission on a container to add herself to the list of followers / likers, but not…

[Previous page](https://forum.solidproject.org/c/solid-specification/34.md)
