[db-wg] Protecting References to Objects in the RIPE Database

Dear Colleagues,

Currently the "mnt-ref:" attribute only protects references to organisation objects in the RIPE database, by specifying which maintainer(s) can authorise the reference.

This means it is possible to make references to other object types without any authorisation, for example:

* Refer to another organisation's maintainer
* Refer to another organisation's abuse-c contact
* Refer to any technical contact, admin contact, zone contact 

Since these references do not need authorisation, it is open to misuse, creating the impression that an unrelated party is responsible for that object.

I propose that the "mnt-ref:" attribute be added (as an optional attribute) to other object types to allow references to be authorised:

* person
* role
* mntner
* irt

This proposal does not eliminate misuse (e.g. contact information can still be copied into a separate object), but protects references to existing objects.

If the DB-WG agrees to this proposal, I will prepare a more detailed impact analysis for review.

Regards
Ed Shryane
RIPE NCC