#csarvenBradKoehn[m] pukkamustard Solid servers require CORS in that all actions will be allowed. Access control will be handled separately at a deeper level - there is an ACL document specifies authorization policies per resource.. what agent .. access modes etc.