Page History

...

1. Implement access control only at the level of spaces
   1. Datasets and collections authorization is based on space
   2. For resources in multiple spaces take the union of permissions
2. Only the owner can add a dataset/collection to a new space
3. In a world where resources can be in multiple spaces, spaces becomes a view into the data, not a simple self contained place
4. What happens if D1 is in C1, C1 is in S1, but D1 is not in S1?
5. Publishing a dataset or collection for public viewing will be done as a separate feature from managing permission on a space level

Permissions Cleanup:

(Note this is the list from api.Permissions.Permission. It's pretty low lever and it's what controller look for in the case of secured actions)