...
- Agent: the authenticated entity
- Function: "can create Hold" "can update Hold" "can remove delete Hold"
- Qualifier: ???
Qualifiers are the slipperiest of the bunch. They vary by Function.
- can update Hold? qualifier=the Hold
- can delete Hold? qualifier=the Hold
- can create Hold? qualifier=we don't have a Hold yet
Holds are created to an Issue and a Resource (student) in the context of a Oubliette OsidCatalog. The qualifier can only be one of these as this is the only information we have on which to authorize. It's probably more common in OSIDs to align Qualifiers with OsidCatalogs. This doesn't necessarily need to be the case. The project wanted Organizations associated with Issues, so aligning Qualifiers to Issues is a good place to start.