London Market Implementation of ACORD DRI Messages and Data
Where an ACL is attached to a document, that ACL must be made available to all parties who are able to view the document, i.e. the ACL is ‘passed on’ as received with the document.
Where a member of the ACL for a document, who does not have change rights, requires that a third party (not on the ACL for the document) be granted access to the document, the ACL member can:
Make an out of band request to a member of the ACL with change rights to add, using a RepositoryChangeAttributesRq message, the new party to the ACL for the relevant document, or
Take a copy of the document and become the publisher of the new copy which should then include the third party in the new ACL for the copy.
The operator of any supporting infrastructure will not be able to alter the ACL or other metadata associated with a document unless under instruction from the document owner. Repository operators must maintain a full audit trial.
ACL are not included in a RepositoryCreateFolderRq message. The consumer must grant the owner/creator of a folder access rights to that folder as if they were on the ACL of that folder.
Documents cannot be removed from repositories. Out of band rules will need to be defined by trading partners to cover situations where a document has been loaded in error.
Implementation specific interim requirements
There are two London Market wide initiatives intending to employ ACORD DRI capability using the Insurers’ Market Repository supplied by Xchanging:
THE ACCOUNTING & SETTLEMENT PROJECT
London Market Implementation of ACORD DRI Messages v1.doc
Page 23 of 48