General Requirements Cont'd

Open user authentication - we don't care how the user is identified.
Structure of access policy information left intentionally undefined.
Need to be able to discover what types of constraints are available in the DAV implementation.