Infrastructure

The methods will look like:

public String update(String pid, InputStream object, String newPid, String sysMetadata);
public String delete(String pid);

They will handle both data and metadata objects.

Three checks have to pass: user has the Write permission on the object, user has execute permission on the service, and the authoritative member node is available for the object.

We will depend the first two checks on the update method of the dataone lib. It will throw an org.dataone.service.exceptions.NotAuthorized exception if it can't pass the check.
We have a new mechanism for the third check.

The attached is the update sequence diagram.