[cap-talk] In defense of Object Capabilities (was: Non-Delegatable Authorities in Capability Systems)

[Mark Miller]

On Dec 19, 2007 12:08 PM, Jed Donnelley <jed at nersc.gov> wrote:
> Try to imagine non-delegatable objects in
> a language like Joe-e.  I believe you simply
> can't do it.

Jed, they are not doing "non-delegatable objects" or permissions. They
are doing non-delegatable *authority*.

I believe the NDA technique in their paper works just as well in Joe-E
as it does in E. In Joe-E it does take a bit more notation because of
Java's static type system and the resulting awkwardness of the
reflection API. But other than that, I believe everything in their
paper could be translated to Joe-E without compromising any of their
points.

-- 
Text by me above is hereby placed in the public domain

    Cheers,
    --MarkM