Package-level declarations
Types
The IASSAuthenticatorService binder: sign-in state, the calling app's own grant, and revocation of that grant by the app itself.
The IASSDataModulesService binder, hosting the contacts and tickets module interfaces.
The IASSNotificationsService binder. The inbox belongs to the account, so every verb is checked on the whole pod: reads at VerbAccess.INBOX_READ, deletions at VerbAccess.INBOX_WRITE, and anything that speaks to another inbox as the user, or records a decision, at VerbAccess.INBOX_SEND. The acting account is the first WebID each verb takes.
The IASSResourceService binder: the full resource surface, each verb guarded on the resource it names at the level VerbAccess gives it.
The IASSharingService binder. Every verb needs VerbAccess.SHARE: on the resource it names when it names one, otherwise on the whole pod, because the share indexes and the received-shares list belong to the account, not to any one resource.