[Authentication] Item (property) visibility

[Michael Leupold]

Hi,

one thing that came to my mind while reading Stef's solution for the multi-
session problem:

We didn't specify if several of the item properties should only be allowed to 
be read (and also written) by sessions which unlocked the item. As it is, the 
service doesn't actually know which session requests the property as it just 
has the client's DBus address.

I wouldn't the global readability that much, but writeability is a problem in 
my eyes.

Quick idea which I didn't really fully think through:

If we have a hit at the multi-session problem we could as well make the 
collections children of session and allow them to only be accessed that way.

I'm not quite sure if this is wouldn't be overkill though.

Regards,
Michael