[regrep] Users and Organizations

[Nikola <nikola.stojanovic@acm.org>]

Currently (ebRIM 2.34) "The owner attribute of a Resource carries the value
of id attribute of the User instance within the registry that represents the
owner of the resource". At the same time a user "may have an organization
attribute that references the Organization instance with which the user is
affiliated". There are also two pre-defined association types "SubmitterOf -
Defines that the source Organization is the submitter of the target
RegistryObject." and "ResponsibleFor - Defines that the source Organization
is responsible for the ongoing maintainence of the target RegistryObject.".

It is possible to submit a registry object that has an owner that is
affiliated with an organization that is different then the one(s) which is
(are) the source object in "SubmitterOf" association. Same applies to
"ResponsibleFor".

Do users need to be able to affiliate themselves with more then 1
organization? Do we need to clarify semantics of affiliation, ownership,
maintenance, ... of registry objects somewhere in the specs or what is in
there now is enough? Are above aspects covered by "Access Control" mechanism
and if yes do we need them as such.

Regards,
Nikola