docs: correct the access-control model against the primary text - #10
Open
LKSNDRTMLKV wants to merge 2 commits into
Open
docs: correct the access-control model against the primary text#10LKSNDRTMLKV wants to merge 2 commits into
LKSNDRTMLKV wants to merge 2 commits into
Conversation
ESPR Article 10 is Requirements for the digital product passport and defines no tiers; access is Art. 11(b), free of charge, with the actor-to-data mapping delegated per product group under Art. 9(2)(f) and no such act adopted yet, so the public Public/Restricted/Private tier page was wrong at its premise and is replaced by the Battery Art. 77(2) lattice plus the constraints common to every regime.
…ate per-passport-per-day count with no scanner-identifying field
Deploying odal-node-landing with
|
| Latest commit: |
44bd73f
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://bb594dfc.odal-node-landing.pages.dev |
| Branch Preview URL: | https://docs-access-control-primary.odal-node-landing.pages.dev |
Deploying odal-node-docs with
|
| Latest commit: |
44bd73f
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://4d143739.odal-node-docs.pages.dev |
| Branch Preview URL: | https://docs-access-control-primary.odal-node-docs.pages.dev |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Corrects the ESPR access-control model against the primary text, and publishes the trust page.
The docs asserted that "ESPR Article 10 establishes that a Digital Product Passport carries three categories of information with different access rules" and that "an implementation that does not enforce them is not compliant."
Article 10 is titled "Requirements for the digital product passport" and establishes no access categories. The access provision is Art. 11(b) — free-of-charge access "based on their respective access rights set out in the applicable delegated act" — with the actor-to-data mapping delegated per product group under Art. 9(2)(f). ESPR names roughly fourteen actor classes and assigns them nothing.
The page also described a mechanism named after code that no longer exists: an
AccessTierenum and anX-Access-Tierheader. The model is audiences and disclosure classes, and a caller-supplied tier header is now deliberately ignored.An ordered public→restricted→private scale cannot express the one fully specified model in the regime — the Battery Regulation's Art. 77(2) lattice, where one class is authority-only and another is legitimate-interest-only. That is why the code separates the two vocabularies, and the page now says so.
Also in this PR
Publishes
trust.astro, which was written and never routed.Adds a scan-telemetry disclosure to it. The node records that a passport was resolved, and no published page said so. The posture in the code is good and survives publication: aggregates are keyed by passport and day with no column for anything about the scanner, and QR renders are counted separately and never summed with scans — a render measures label production, not people. The defect was the silence, not the behaviour. Text verified against
dpp-types/src/scan.rsbefore publishing.Note the merge order: this touches
trust.astro, and so does the i18n branch. Land this first and rebase that onto it.