This document provides a specification for expressing resource-specific capabilities using entitlements. A capability defines the resource or child-resource a user is allowed to access, optionally specifying certain actions the user is entitled to perform. Capabilities can be used to convey – in a compact form – authorisation information.
Document URL: https://zenodo.org/record/2247446/files/AARC-G027-Specification_for_expressing_resource_capabilities.pdf
Status: Final (10 Dec 2018), Endorsed AEGIS (10 Dec 2018)