From 8537ec293281edce00d19d835aa3aad5eed5ac9b Mon Sep 17 00:00:00 2001 From: Wojciech Rygielski Date: Thu, 9 Feb 2017 10:48:28 +0100 Subject: [PATCH] Guidelines on "hiding" ounits Somewhat related to: https://github.com/erasmus-without-paper/general-issues/issues/20 --- README.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index a41b237..915238b 100644 --- a/README.md +++ b/README.md @@ -73,10 +73,15 @@ Permissions * All requests from the EWP Network MUST be allowed to access this API. - * Additionally, implementers MAY allow this API to be accessed by + * Additionally, server implementers MAY allow this API to be accessed by **anonymous** external clients too (without the need of using any client certificate). + * Server implementers MAY choose to hide some of their organizational units + from EWP members. But if they do, they MUST keep proper referential + integrity in mind (if a unit is referenced somewhere in other APIs, then it + MUST be visible here). + Handling of invalid parameters ------------------------------