Why are AccessAuthorizations immutable ?

[srosset81]

I'm assuming here that DataAuthorizations and DataGrants have been removed from the spec.

I know that, if AccessGrants are immutable, it is to help detect updated grants when looking at the AgentRegistrations.

But what's the point of having immutable AccessAuthorizations ? They are only used internally by the Authorization Agent.

[elf-pavlik]

Your are right that Grants are crossing security domains and Authorizations are internal to one security domain.
I think one of the reasons to have Authorization immutable is similar to what we discussed in #334, specifically auditing and 'time travel'. I guess if we remove Access* grouping Data* we already loose that part and need a different approach for auditing.

I've been looking at LDES in LDP and maybe that approach could address the versioning in more generic way.

Could you please share what advantages you see in mutating Authorizations instead of superseding them? Meanwhile I will think hard if I can see any potential issues with making them mutable.

I haven't implemented any Trusted Authorization/Grants #187 / #71 where we expect authorization agents of all admins of group/organization to collaboratively manage registries of that group/organization. I guess Conditional Updates should prevent any issues but we might want to double check if any issues could arise in this scenario.