Content Management Interoperability Services (CMIS) Version 1.1

3 AtomPub Binding
3.1 Overview
This binding is based upon the Atom ([RFC4287]) and Atom Publishing Protocol ([RFC5023]). Implementations
of CMIS MUST be compliant with [RFC4287] and [RFC5023].
In this binding, the client interacts with the repository by acquiring the service document. The client will
request the service document by the URI provided by the vendor. The client will then choose a CMIS
collection, and then start accessing the repository by following the references in the returned documents.
This binding consists of a service document specifying at least CMIS service collections, Atom collections,
feeds and entry documents. CMIS extends the Atom and AtomPub documents utilizing the Atom and Atom-
Pub extension mechanism. CMIS also leverages link tags to specify additional resources related to the
requested resource.
When requesting a resource, optional parameters may be specified to change default behavior via query
parameters.
3.1.1 Namespaces
This specification uses the following namespaces and prefixes when referring to XML or XML schema elements
in the text or examples:
• CMIS-Core: http://docs.oasis-open.org/ns/cmis/core/200908/
Prefix: cmis
• CMIS-RestAtom: http://docs.oasis-open.org/ns/cmis/restatom/200908/
Prefix: cmisra
• Atom : http://www.w3.org/2005/Atom
Prefix: atom
• AtomPub: http://www.w3.org/2007/app
Prefix: app
3.1.2 Authentication
Authentication SHOULD be handled by the transport protocol. Please see AtomPub [RFC5023] section 14.
If the provided credentials are incorrect or unknown or entirely missing, a repository MAY return the HTTP
status code 403 (Forbidden) instead of the HTTP status code 401 (Unauthorized). This may prevent attacks
against the Browser Binding. See also section 5.2.9 Authentication.
3.1.3 Response Formats
The client can specify, in HTTP the Accept header, which formats are acceptable to the client. With this
mechanism the client can choose which response format the CMIS implementation should respond with.
The CMIS compliant implementation MUST support the appropriate Media Types specified in this document.
CMIS-v1.1-csprd01
Standards Track Work Product
Copyright © OASIS Open 2012. All Rights Reserved.
18 August 2012
Page 201 of 331