[cap-talk] Real world distributed capabilities

[Monty Zukowski]

So, I've got a new job and I'm trying to use capability security discipline as 
we're architecting our Java servers (which run programs that do data 
transformation).  The idea right now is to try to follow the guidelines in 
the Joe-E draft paper, and adopt the Joe-E tool once it is ready.

We also need to worry about concurrency and distributed programming.  Is 
anyone using the E-lib from Java?  I'd love to hear about real world 
performance issues, programming complexity, etc.  I realize that Joe-E 
intends to use it too, but we need to start programming already.

Also, has anyone done any practical work on visualizing capability graphs?  
I've been diagramming the objects representing the different types of users 
we have and what they are allowed to do, and the objects that they can 
manipulate.  I noticed I needed to distinguish between object creation and 
holding and passing of references.  Once I had about 20 objects in there it 
wasn't quite as cute as, say, the Granovetter Diagram, although it wouldn't 
be so bad if I broke it into subgraphs with just one page or graph per class.

Thanks,

Monty