<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="font-family: "Aptos Display", "Aptos Display_EmbeddedFont", "Aptos Display_MSFontService", "Calibri Light", "Helvetica Light", sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: "Aptos Display", "Aptos Display_EmbeddedFont", "Aptos Display_MSFontService", "Calibri Light", "Helvetica Light", sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Sounds to me that resource Id shouldn't be mandatory, or that the resource Id is for the collection of loans. Passing a resource ID of 0 works, but that just feels like a magic value.</div>
<div class="elementToProof" style="font-family: "Aptos Display", "Aptos Display_EmbeddedFont", "Aptos Display_MSFontService", "Calibri Light", "Helvetica Light", sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="font-family: "Aptos Display", "Aptos Display_EmbeddedFont", "Aptos Display_MSFontService", "Calibri Light", "Helvetica Light", sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Andy</div>
<div dir="ltr" style="mso-line-height-rule:exactly;-webkit-text-size-adjust:100%;font-size:1px;direction:ltr;"><table cellpadding="0" cellspacing="0" border="0" style="width:100%;border-collapse:collapse;font-size:1px;"><tr style="font-size:0;"><td align="left"><table dir="ltr" cellpadding="0" cellspacing="0" border="0" style="background-color:#FFFFFF;direction:ltr;border-collapse:collapse;font-size:0;"><tr style="font-size:0;"><td align="left" style="vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="width:100%;border-collapse:collapse;font-size:0;"><tr style="font-size:0;"><td align="left" style="vertical-align:top;line-height:normal;"><a href="https://registry.blockmarktech.com/certificates/53f9a3ba-4ba6-4879-8b4d-5f5d3a413118/" target="_blank" id="LPlnk689713" style="text-decoration:none;"><img src="cid:image622380.png@710E27FF.BF2717C3" width="100" height="100" border="0" alt="" style="width:100px;min-width:100px;max-width:100px;height:100px;min-height:100px;max-height:100px;font-size:0;" /></a></td><td align="left" style="vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="border-collapse:collapse;font-size:0;line-height:normal;"><tr style="font-size:0;"><td align="left" style="padding:0;border-top:none;border-right:solid 4px #000001;border-bottom:none;border-left:none;vertical-align:top;"><img src="cid:image608736.png@8FE77AE5.CA171974" width="85" height="124.1" border="0" alt="" style="width:85px;min-width:85px;max-width:85px;height:124.1px;min-height:124.1px;max-height:124.1px;font-size:0;" /></td></tr></table></td><td align="left" style="vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="width:100%;border-collapse:collapse;font-size:0;"><tr style="font-size:0;"><td align="left" style="padding:7px 0 0 7px;vertical-align:top;"><table cellpadding="0" cellspacing="0" border="0" style="white-space:normal;color:#000001;font-size:14.67px;font-family:Calibri,Arial,sans-serif;font-weight:400;font-style:normal;text-align:justify;line-height:14px;width:100%;border-collapse:collapse;"><tr style="font-size:10.67px;"><td style="font-family:Calibri,Arial,sans-serif;"><span style="font-size:13px;"><br />We are the first IdentityServer partner to become a Certified B Corporation™.<br />Head to our <span style="text-decoration:underline;color:#3A13CD;"><a href="https://www.rocksolidknowledge.com/mission-statement" target="_blank" id="LPlnk689713" title="https://www.rocksolidknowledge.com/mission-statement" style="text-decoration:none;color:#3A13CD;">mission </a><a href="https://www.rocksolidknowledge.com/mission-statement" target="_blank" id="LPlnk689713" title="https://www.rocksolidknowledge.com/mission-statement" style="text-decoration:none;color:#3A13CD;">sta</a><a href="https://www.rocksolidknowledge.com/mission-statement" target="_blank" id="LPlnk689713" title="https://www.rocksolidknowledge.com/mission-statement" style="text-decoration:none;color:#3A13CD;">tement</a></span> to read more about the ways we’re using business as a force for good.<br /><br />Rock Solid Knowledge Ltd is a company registered in England and Wales under number 6811209.<br />Registered office: C2, Vantage Office Park, Old Gloucester Road, Bristol, BS16 1GW, United Kingdom<br />Vat registered: GB948 1966 72</span><br /></td></tr></table></td></tr></table></td></tr></table></td></tr></table></td></tr></table><span style="font-family:remialcxesans;"> <span style="font-family:'template-CbyZv7ONEe6-oGBFvdGUFw';"> </span><span style="font-family:'zone-1';"> </span><span style="font-family:'zones-AQ';"> </span></span></div><div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Openid-specs-authzen <openid-specs-authzen-bounces@lists.openid.net> on behalf of Allan via Openid-specs-authzen <openid-specs-authzen@lists.openid.net><br>
<b>Sent:</b> 08 May 2025 11:40<br>
<b>To:</b> AuthZEN Working Group List <openid-specs-authzen@lists.openid.net><br>
<b>Cc:</b> Allan <allan@macguru.com><br>
<b>Subject:</b> Re: [Openid-specs-authzen] A question on resource identifiers for resources that do not exist yet</font>
<div> </div>
</div>
<div dir="auto"><img id="x_33E9E7E95914C65767B3BE393381C98E" alt="" width="0px" height="0px" src="https://receipts.canarymail.io/track/AE980BFE3A76DE71B7ADC1325DB56676_33E9E7E95914C65767B3BE393381C98E.png">
<div id="x_CanaryBody">
<div>hmmm</div>
<div><br>
</div>
<div>surely customer is part of the resource? and a create can simply use a resource ID of 0 or -1. or null</div>
<div><br>
</div>
<div>allan</div>
<div><br>
</div>
</div>
<div id="x_CanarySig">
<div>
<div style="font-family:Helvetica">--<br>
Sent from <a href="https://canarymail.io">Canary</a></div>
<div><br>
</div>
</div>
</div>
<div id="x_CanaryDropbox"></div>
<blockquote id="x_CanaryBlockquote">
<div>
<div>On Thursday, May 08, 2025 at 12:34, David Brossard via Openid-specs-authzen <<a href="mailto:openid-specs-authzen@lists.openid.net">openid-specs-authzen@lists.openid.net</a>> wrote:<br>
</div>
<div>
<div dir="ltr">
<div>Hi all,<br>
</div>
<div><br>
</div>
<div>Interesting use case from EIC: I want to write a policy that determines how a loan-to-be can be created.</div>
<div><br>
</div>
<div>Managers can create a loan for a customer in their region up to their max allowed amount for the employee (and/or customer).</div>
<div><br>
</div>
<div>The request would then be:</div>
<div>
<ul>
<li>Can Alice the employee create loan with amount 1234?</li></ul>
In this type of request, because the loan hasn't been created we do not have a loan ID or resource ID. But, because AuthZEN makes the resource ID mandatory in the evaluation API, what approach do we want to recommend?</div>
<div><br>
</div>
<div>David </div>
<div dir="ltr" class="x_gmail_signature" data-smartmail="gmail_signature"></div>
</div>
-- <br>
Openid-specs-authzen mailing list <br>
Openid-specs-authzen@lists.openid.net <br>
https://lists.openid.net/mailman/listinfo/openid-specs-authzen <br>
</div>
</div>
</blockquote>
</div>
</body>
</html>