Comments on: Access in URLs considered harmful http://www.summersault.com/community/weblog/2006/02/04/access-in-urls-considered-harmful.html The weblog for Summersault, LLC, a website development firm in Richmond, Indiana Sat, 11 Oct 2008 14:29:58 +0000 http://wordpress.org/?v=1.5.1.3 by: Michael Peters http://www.summersault.com/community/weblog/2006/02/04/access-in-urls-considered-harmful.html#comment-494 Fri, 17 Feb 2006 14:55:37 +0000 http://www.summersault.com/community/weblog/2006/02/04/access-in-urls-considered-harmful.html#comment-494 I think you raised some interesting points. If the URL represents a resource then yes, I think access control built into the URL can be frustrating when that URL is shared. However, if the URL represents an application (not a static resource) then there is not guarantee that what you see is even shareable. I think a good transitional approach (as normal users change their web-experience from a "page-view" to an "application-view") is something like what google maps does. You can't just copy paste the URL to a friend and expect them to see the same map you're seeing. But you can press a nifty little button/link to create a URL to a "static" shareable resource. Also, since AJAX apps still use URLs in the background (although hidden from the user) I see no problem in placing access control in those URLs. I think you raised some interesting points. If the URL represents a resource then yes, I think access control built into the URL can be frustrating when that URL is shared. However, if the URL represents an application (not a static resource) then there is not guarantee that what you see is even shareable.

I think a good transitional approach (as normal users change their web-experience from a “page-view” to an “application-view”) is something like what google maps does. You can’t just copy paste the URL to a friend and expect them to see the same map you’re seeing. But you can press a nifty little button/link to create a URL to a “static” shareable resource.

Also, since AJAX apps still use URLs in the background (although hidden from the user) I see no problem in placing access control in those URLs.

]]>