{"action":"created","issue":{"url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/1852","repository_url":"https://api.github.com/repos/sandstorm-io/sandstorm","labels_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/1852/labels{/name}","comments_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/1852/comments","events_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/1852/events","html_url":"https://github.com/sandstorm-io/sandstorm/issues/1852","id":148641281,"number":1852,"title":"Control which users can share the grain further and which do not","user":{"login":"mitar","id":585279,"avatar_url":"https://avatars.githubusercontent.com/u/585279?v=3","gravatar_id":"","url":"https://api.github.com/users/mitar","html_url":"https://github.com/mitar","followers_url":"https://api.github.com/users/mitar/followers","following_url":"https://api.github.com/users/mitar/following{/other_user}","gists_url":"https://api.github.com/users/mitar/gists{/gist_id}","starred_url":"https://api.github.com/users/mitar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mitar/subscriptions","organizations_url":"https://api.github.com/users/mitar/orgs","repos_url":"https://api.github.com/users/mitar/repos","events_url":"https://api.github.com/users/mitar/events{/privacy}","received_events_url":"https://api.github.com/users/mitar/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2016-04-15T11:53:11Z","updated_at":"2016-04-21T11:43:28Z","closed_at":null,"body":"It would be great to be able to define which users can share the grain further and which do not."},"comment":{"url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/comments/212878087","html_url":"https://github.com/sandstorm-io/sandstorm/issues/1852#issuecomment-212878087","issue_url":"https://api.github.com/repos/sandstorm-io/sandstorm/issues/1852","id":212878087,"user":{"login":"mitar","id":585279,"avatar_url":"https://avatars.githubusercontent.com/u/585279?v=3","gravatar_id":"","url":"https://api.github.com/users/mitar","html_url":"https://github.com/mitar","followers_url":"https://api.github.com/users/mitar/followers","following_url":"https://api.github.com/users/mitar/following{/other_user}","gists_url":"https://api.github.com/users/mitar/gists{/gist_id}","starred_url":"https://api.github.com/users/mitar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mitar/subscriptions","organizations_url":"https://api.github.com/users/mitar/orgs","repos_url":"https://api.github.com/users/mitar/repos","events_url":"https://api.github.com/users/mitar/events{/privacy}","received_events_url":"https://api.github.com/users/mitar/received_events","type":"User","site_admin":false},"created_at":"2016-04-21T11:43:28Z","updated_at":"2016-04-21T11:43:28Z","body":"Yes, I like delegations as well. In fact my voting app is modeled around delegations for collaboration as well (see [these](http://mitar.tnode.com/post/73930434538/massive-online-collaborative-decision-making) [blog](http://mitar.tnode.com/post/73933896602/towards-a-better-group-decision-making) [posts](http://mitar.tnode.com/post/73983101095/peer-to-peer-voting-scheme), feel free to read them).\r\n\r\nAnd I completely agree that the resharing is more of an UI thing that something else. I like the \"please don’t reshare\" message which user can then decide to obey or not.\r\n\r\nBased on the blog and examples there, there is maybe a middle ground: you can pass capabilities around, but you loose them. So if I want somebody else to edit my document, I can pass capability to them, but then I cannot edit it, for the time being, until they return a token.\r\n\r\nThis could be an interesting middle ground because it would allow one to control who has access directly (without having to contact Alice), but on other hand would incentivize people to ask for capability back when they think the other person do not need it.\r\n\r\nWhen we look at votes, this is pretty reasonable. You have a permission to vote. You can give somebody else this permission, to vote instead of you. But then you should not be able to vote anymore.\r\n\r\nAlternatively, one other option would be that the app would be informed when capability was shared further by bypassing the policy. This could allow my voting app for example to take into account this (maybe giving each of the people 0.5 of the vote). And some other apps could maybe be able to evaluate if there is some leak happening."}}