[ { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc/Head", "@graph": [ { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc", "http://www.nanopub.org/nschema#hasAssertion": [ { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc/assertion" } ], "http://www.nanopub.org/nschema#hasProvenance": [ { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc/provenance" } ], "http://www.nanopub.org/nschema#hasPublicationInfo": [ { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc/pubinfo" } ], "@type": [ "http://www.nanopub.org/nschema#Nanopublication" ] } ] }, { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc/provenance", "@graph": [ { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc/assertion", "http://www.w3.org/ns/prov#wasAttributedTo": [ { "@id": "https://orcid.org/0000-0002-1267-0234" } ] } ] }, { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc/pubinfo", "@graph": [ { "@id": "https://orcid.org/0000-0002-1267-0234", "http://xmlns.com/foaf/0.1/name": [ { "@value": "Tobias Kuhn" } ] }, { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc", "http://purl.org/dc/terms/created": [ { "@value": "2026-08-19T06:58:30Z", "@type": "http://www.w3.org/2001/XMLSchema#dateTime" } ], "http://purl.org/dc/terms/creator": [ { "@id": "https://orcid.org/0000-0002-1267-0234" } ], "http://purl.org/dc/terms/license": [ { "@id": "https://creativecommons.org/licenses/by/4.0/" } ], "http://purl.org/nanopub/x/embeds": [ { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc/list-space-non-approved" } ], "http://purl.org/nanopub/x/supersedes": [ { "@id": "https://w3id.org/np/RAhSqdJ6w_dpbVwlCLQyp5rqOWGSnG47EL_hULHkspehQ" } ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "List space non-approved role claims (ref-scoped)" } ], "https://w3id.org/np/o/ntemplate/wasCreatedFromProvenanceTemplate": [ { "@id": "https://w3id.org/np/RA7lSq6MuK_TIC6JMSHvLtee3lpLoZDOqLJCLXevnrPoU" } ], "https://w3id.org/np/o/ntemplate/wasCreatedFromPubinfoTemplate": [ { "@id": "https://w3id.org/np/RACJ58Gvyn91LqCKIO9zu1eijDQIeEff28iyDrJgjSJF8" }, { "@id": "https://w3id.org/np/RAukAcWHRDlkqxk7H2XNSegc1WnHI569INvNr-xdptDGI" } ], "https://w3id.org/np/o/ntemplate/wasCreatedFromTemplate": [ { "@id": "https://w3id.org/np/RAEFAt-QcFK0ZhqfvlsmS10BnzGJA0xwOICZXkO-ai87k" } ] }, { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc/sig", "http://purl.org/nanopub/x/hasAlgorithm": [ { "@value": "RSA" } ], "http://purl.org/nanopub/x/hasPublicKey": [ { "@value": "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCwUtewGCpT5vIfXYE1bmf/Uqu1ojqnWdYxv+ySO80ul8Gu7m8KoyPAwuvaPj0lvPtHrg000qMmkxzKhYknEjq8v7EerxZNYp5B3/3+5ZpuWOYAs78UnQVjbHSmDdmryr4D4VvvNIiUmd0yxci47dTFUj4DvfHnGd6hVe5+goqdcwIDAQAB" } ], "http://purl.org/nanopub/x/hasSignature": [ { "@value": "NbgwNLh4suYoiXdn+cTYxbhofdNyXz0tea2N3U+j2BY74UQrUAbXYzmV6T55rxyQqPFXxkU5o2fkxaUc+z0X21pNQIhRz0Lln126TKTdFKEad7o0SRUybQ0jgyxgXYABg9gUutjYPd808aAa2NmYu46984GbQZxhg/1at9UqrCo=" } ], "http://purl.org/nanopub/x/hasSignatureTarget": [ { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc" } ], "http://purl.org/nanopub/x/signedBy": [ { "@id": "https://orcid.org/0000-0002-1267-0234" } ] } ] }, { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc/assertion", "@graph": [ { "@id": "https://w3id.org/np/RAVsaIwAWFk9NekiVx-pGN6c1p-CK9ozishyvXcjUtTLc/list-space-non-approved", "http://purl.org/dc/terms/description": [ { "@value": "Lists the non-approved role claims of a given space ref (space IRI + root definition): agents who hold a higher-tier role instantiation (admin/maintainer/member) that is NOT in the trust-validated current state, i.e. a self-assigned or otherwise ungranted claim awaiting approval by an equal-or-higher-tier member. Pass the ref's root nanopub (root_np). Observer-tier roles are excluded: they are self-assignable, so a self-declared observer needs no approval and is shown by list-space-observers instead. The higher-tier test is generic — the built-in admin property (gen:hasAdmin) OR a RoleDeclaration whose npa:hasRoleType is gen:AdminRole/gen:MaintainerRole/gen:MemberRole. Per (member, role) only the latest role-instantiation nanopub is considered (by dct:created). Returns one row per member with the claimed tier, the grant nanopub(s) with the claimed role's label (role_assignments_multi_iri + role_assignments_label_multi), and a consistent (approve_np, grant_template) pair for the approve action: the granting nanopublication to derive from and the template to open it with. v2: adds the role_assignments columns. v3: resolves owl:sameAs space aliases (via the ref's validated npa:sameAsSpace edges in the current-state graph), so a higher-tier claim made against an alias IRI of the space is detected. v4: the invalidation filter honours an npx:invalidates edge only when the invalidating nanopub shares a signing pubkey (npa:hasValidSignatureForPublicKeyHash) with the grant it targets, so a foreign-key retraction can no longer suppress another agent's claim (issue #487 / same gate as the materializer's #112). v5: BUGFIX — the v3/v4 space-alias resolution used a BIND-in-UNION pattern that RDF4J leaves unbound, so the query returned ZERO rows for every space; replaced with a non-union filter/exists that restores detection while keeping alias resolution. v6: adds an approve_np column holding the granting nanopublication for each pending row. v7 (nanodash issue #603): replaces the admin-only roleAssignmentTemplate and agent_iri columns with a per-row (approve_np, grant_template) pair so the approve action works for EVERY tier, not only for admin grants: grant_template is the grant's own nt:wasCreatedFromTemplate (falling back to the free-form template), letting the approve action open the pending grant in derive mode (approve_np:@derive-a grant_template:@template) so the approver re-publishes the same assertion under their own key — which is exactly what tier validation requires. The tier column is DETERMINISTIC: the highest tier among the member's pending claims (rank-keyed min, not a sample), and the approve pair is computed from the SAME grant via a rank-prefixed concatenated min — preferring the grant of that highest tier — so the displayed tier, the derive target, and the template can never mismatch when a member has pending claims under several role properties. A grant whose assertion defines a Space itself (a root definition, detected via '?s a gen:Space' since gen:hasRootDefinition is absent on older definitions) is not offered for derivation, as deriving it would publish a competing root definition; for admin-tier claims such rows instead pair with the built-in admin-assignment template, so the approve button keeps working as a space-ref-conflict remedy (the hasAdmin triple unifies with that template, the definition's other statements show as unfillable). Rows whose grant is not loaded in this repo, or whose grant is a space definition claiming a non-admin tier, get no pair and hence no approve button." } ], "http://purl.org/dc/terms/license": [ { "@id": "http://www.apache.org/licenses/LICENSE-2.0" } ], "@type": [ "https://w3id.org/kpxl/grlc/grlc-query" ], "http://www.w3.org/2000/01/rdf-schema#label": [ { "@value": "List space non-approved role claims (ref-scoped)" } ], "https://w3id.org/kpxl/grlc/endpoint": [ { "@id": "https://w3id.org/np/l/nanopub-query-1.1/repo/spaces" } ], "https://w3id.org/kpxl/grlc/sparql": [ { "@value": "prefix rdfs: \nprefix dct: \nprefix np: \nprefix npa: \nprefix npx: \nprefix nt: \nprefix gen: \nprefix schema: \n\nselect ?member\n (strafter(min(?tierKey), \" \") as ?tier)\n (group_concat(distinct ?latestNp; separator=\" \") as ?role_assignments_multi_iri)\n (group_concat(distinct ?roleLabel; separator=\"\\n\") as ?role_assignments_label_multi)\n (strbefore(strafter(min(?pair), \" \"), \" \") as ?approve_np)\n (strafter(strafter(min(?pair), \" \"), \" \") as ?grant_template)\nwhere {\n {\n select ?member ?roleProp\n (max(?val0) as ?val)\n (strafter(max(concat(coalesce(str(?dateNp),\"\"), \" \", str(?grantNp))), \" \") as ?latestNp)\n (sample(?tier0) as ?tierX)\n (sample(?rl) as ?rlRaw)\n where {\n values ?_root_np_multi_iri {}\n graph npa:spacesGraph { ?ref npa:rootNanopub ?_root_np_multi_iri ; npa:spaceIri ?spaceIri . }\n graph npa:graph { npa:thisRepo npa:hasCurrentSpaceState ?g . }\n graph npa:spacesGraph {\n ?ri a gen:RoleInstantiation ; npa:forSpace ?inSpace ; npa:forAgent ?member ; npa:viaNanopub ?grantNp ;\n (npa:regularProperty|npa:inverseProperty) ?roleProp .\n }\n filter( ?inSpace = ?spaceIri || exists { graph ?g { ?inSpace npa:sameAsSpace ?ref } } )\n bind(?roleProp = gen:hasAdmin as ?isAdminProp)\n bind(exists { graph npa:spacesGraph { ?rdA a npa:RoleDeclaration ; npa:hasRoleType gen:AdminRole ; (gen:hasRegularProperty|gen:hasInverseProperty) ?roleProp } } as ?isAdminDecl)\n bind(exists { graph npa:spacesGraph { ?rdM a npa:RoleDeclaration ; npa:hasRoleType gen:MaintainerRole ; (gen:hasRegularProperty|gen:hasInverseProperty) ?roleProp } } as ?isMaint)\n bind(exists { graph npa:spacesGraph { ?rdMe a npa:RoleDeclaration ; npa:hasRoleType gen:MemberRole ; (gen:hasRegularProperty|gen:hasInverseProperty) ?roleProp } } as ?isMemb)\n filter(?isAdminProp || ?isAdminDecl || ?isMaint || ?isMemb)\n filter not exists { graph npa:graph { ?invNp npx:invalidates ?grantNp ; npa:hasValidSignatureForPublicKeyHash ?invpk . ?grantNp npa:hasValidSignatureForPublicKeyHash ?invpk . } }\n bind(if(exists { graph ?g { ?vri npa:forSpaceRef ?ref ; npa:forAgent ?member ; (npa:regularProperty|npa:inverseProperty) ?roleProp } }, 1, 0) as ?val0)\n optional { graph npa:graph { ?grantNp dct:created ?dateNp } }\n bind(if(?isAdminProp || ?isAdminDecl, \"Admin\", if(?isMaint, \"Maintainer\", \"Member\")) as ?tier0)\n optional {\n graph ?g { ?raRole a gen:RoleAssignment ; npa:forSpaceRef ?ref ; gen:hasRole ?role . }\n graph npa:spacesGraph { ?rd2 a npa:RoleDeclaration ; npa:role ?role ; (gen:hasRegularProperty|gen:hasInverseProperty) ?roleProp ; npa:viaNanopub ?roleNp . }\n graph npa:graph { ?roleNp np:hasAssertion ?role_a . }\n optional { graph ?role_a { ?role schema:name ?rlS } }\n optional { graph ?role_a { ?role rdfs:label ?rlA } }\n optional { graph ?role_a { ?role dct:title ?rlB } }\n bind(coalesce(?rlS, ?rlA, ?rlB) as ?rlResolved)\n }\n bind(if(?isAdminProp, \"admin\", ?rlResolved) as ?rl)\n }\n group by ?member ?roleProp\n having (max(?val0) = 0)\n }\n bind(coalesce(?rlRaw, \"role\") as ?roleLabel)\n bind(iri(?latestNp) as ?latestNpIri)\n optional { graph npa:graph { ?latestNpIri np:hasAssertion ?la . } }\n bind(exists { graph ?la { ?anySpace a gen:Space . } } as ?isSpaceDef)\n optional {\n graph npa:graph { ?latestNpIri np:hasPublicationInfo ?pi . }\n graph ?pi { ?latestNpIri nt:wasCreatedFromTemplate ?gtmplRaw . }\n }\n bind(if(?tierX = \"Admin\", \"1 Admin\", if(?tierX = \"Maintainer\", \"2 Maintainer\", \"3 Member\")) as ?tierKey)\n bind(if(bound(?la) && !?isSpaceDef,\n concat(strbefore(?tierKey, \" \"), \" \", ?latestNp, \" \", coalesce(str(?gtmplRaw), \"http://purl.org/np/RACyK2NjqFgezYLiE8FQu7JI0xY1M1aNQbykeCW8oqXkA\")),\n if(?isSpaceDef && ?tierX = \"Admin\",\n concat(\"1 \", ?latestNp, \" https://w3id.org/np/RAsOQ7k3GNnuUqZuLm57PWwWopQJR_4onnCpNR457CZg8\"),\n ?undefPair)) as ?pair)\n}\ngroup by ?member\norder by ?member" } ] } ] } ]