2020-07-26 UTC
# 
BradKoehn[m] To use AP to determine the permissions you'd need to extend the existing objects; you could add a `permission` section to any document that describes the roles permitted to do things to it, or ACLs, or however you'd like to model authorization in your application. But it would probably take the form of an extension to the base specification.