Access control is at the heart of Ponifia's system. It determines who can interact with your devices and what actions they can perform.

How does it work?

The Ponifia's access feature combines permissions from various sources, based on the

• User key - uuid of a person that wants to access a device
• Target key - target uuid that user wants to have the access granted. It may be avatar key or any other
• Permissions - list of the permissions that user wants to have granted over the target key

Each of the source may grant or restrict permission for the user over the target. If the permission is restricted by at least one of the sources then the combined result will be always NOT GRANTED. If the permission is not restricted by any of the sources but granted by any of them it will result with GRANTED. Otherwise if the permission is neither GRANTED or RESTRICTED, the result will be NOT GRANTED.

The permissions are calculated for the One Ring to determine what user can do with the device. They are also calculated for the scripts using Ponifia's API to grant access.

TT Access

The one ring origins from TT Nose Ring which uses TT Access to grant permissions to Tall Tails members over various of things. Tall Tails's members have the permissions granted according to their roles. The one ring is a replacement of legacy TT Nose Ring and acts as the second version of it. As that, it is distributed for free. However, TT Access is mandatory in the free version. It can be made optional for a fee (in progress).

Wearer access

The permissions for the wearer are calculated differently than for the others. Especially, when wearer's device is locked then they lose the access to the device except for changing their password to the Ponifia.fun site.

Wearer State and Settings access

The access is calculated based on the wearer state and settings. Especially, there the features that require explicit consent from the wearer to be used. If the consent is not granted then the wearer state access will always return the permission as restricted. Other example, may be enabled features. If the wearer hasn't enabled some feature or the permission is for paid feature, then the access also may be restricted.

Relation based access

In my avatar access page, you can add people to your personal relations. Currently available relations are: Owner Keyholder, Trusted and Friend. By adding someone to a relation you grant them access to you specified by the relation, which are listed there.

Be careful with adding the owners because then you won't be able to manage your relations anymore in favor to your new owner. If you just want to have fun giving full control over yourself in world but without a long term commitment, you can use Keyholder relation instead.

Group access

If you are an active member of a group, then the group has access to your devices and may grant it to any member by assigning them to the specific roles.

Ponifia Native access

(to be developed)