Subject: [scim] Clarification about read-only attributes

From: Andy Coulbeck <[email-masked]>
Date: Tue, 2 Jul 2013 13:45:29 -0500

The SCIM core schema specification is apparently ambiguous about the semantics of READ-ONLY attributes. There are at least two possibilities:

1. A READ-ONLY attribute may be set in a POST, but not in a PUT or PATCH.
2. A READ-ONLY attribute may never be set (perhaps because it is dynamically assigned by the service provider).

Some of the core schema attributes, (namely, the "id" attribute, meta attributes and the "groups" attribute) appear to fall in category 2.
For custom attributes, and the "display" sub-attribute, it seems like they instead fall in category 1 -- since there is no other way to set an initial value.

Do others agree that READ-ONLY attributes may be provided in a POST?

Thanks,
Andy