user group based on collection of works

[xristy]

Similar to issue #2 we need a means of associating a full readonly access privilege to a collection of works such as with IP address ranges associated with Core Text Collections.

The application is for translators such as the 84000 amorphous team that need full read access to the pedurma katen - which is copyrighted. Essentially we create an adm:Product or a bdo:VirtualInstance that includes a set of Instances, like W1PD96682 and bdr:W1PD95844 and then associate a set of users that can have full read access to these instances.

Something like:

bdr:Pedurmas 
  a :VirtualInstance ;
  :hasFullAccessGroup  bda:Group84000 ;
  :hasMember  bdr:W1PD96682 , bdr:W1PD95844 ;
.

IP address ranges that are used in Core Text Collection are not suitable for this use case since the users aren't tied to a predictable set of IP ranges; and the blanket read-only user access to all copyrighted works afforded by the group 84000 in tbrc.org is much too broad.

[MarcAgate]

I think something along this line is better:

adr:84000Group a aut:Group (generated from auth0)
adr:84000Group aut:groupAccess bdr:W1PD96682 , bdr:W1PD95844 ;

just because what we have in the request is a resourceId, not an abstract object of the model (i.e we don't want to check in fuseki if the resourceID we are asked to serve is part of a :VirtualInstance, then find its group and its members)

WDYT ?

[eroux]

that would work for me yes

[xristy]

+1