[cap-talk] The transitive access problem

[Karp, Alan H]

Shap wrote:
> 
> It seems that this idea is very closely related to the capability
> revocation problem (notably worth citing: Redell's thesis) and the
> *selective* revocation problem (no citation that I know 
> about). Probably
> more closely related to the latter.
> 
I don't see the connection.  Nothing in what I wrote refers to
revocation.  Can you explain?

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
https://ecardfile.com/id/Alan_Karp
http://www.hpl.hp.com/personal/Alan_Karp
  
  

> -----Original Message-----
> From: cap-talk-bounces at mail.eros-os.org 
> [mailto:cap-talk-bounces at mail.eros-os.org] On Behalf Of 
> Jonathan S. Shapiro
> Sent: Sunday, July 29, 2007 9:20 AM
> To: General discussions concerning capability systems.
> Subject: Re: [cap-talk] The transitive access problem
> 
> On Sat, 2007-07-28 at 22:55 +0000, Karp, Alan H wrote:
> > > 			The Transitive Access Problem for SOA
> > > 
> > > A number of Services Oriented Architecture (SOA) projects 
> > > have failed to
> > > achieve all their stated goals. A common reason for failure is the
> > > inability to solve the transitive access problem, which is best
> > > illustrated with an example. A program run by Alice 
> invokes a service
> > > run by Bob. In order to satisfy Alice's request, Bob's 
> > > service invokes a
> > > service run by Carol. 
> 
> It seems that this idea is very closely related to the capability
> revocation problem (notably worth citing: Redell's thesis) and the
> *selective* revocation problem (no citation that I know 
> about). Probably
> more closely related to the latter.
> 
> 
> shap
> 
> _______________________________________________
> cap-talk mailing list
> cap-talk at mail.eros-os.org
> http://www.eros-os.org/mailman/listinfo/cap-talk
>