It can be even worst if we combine patterns with types, e.g. updateContext DELETE using entity ID ".*" with pattern equal to true and no type will result in deleting *all* the entities in the CB database. Fortunatelly, patterns with updates are not (currently) supported ;)

However, owner, groups, access lists, etc. are concepts supposedly managed by the authorization proxy between the client and Orion Context Broker core, based on the OAuth2 framework provided by FI-LAB. Thus, in my opinion this is not work for the code in this repository, as the Orion "core" assumes that security is provided by other components (separation of concerns). Explaining this properly probably requires a skype conversation :)