[cap-talk] XML as capabilities.

John Carlson john.carlson3 at sbcglobal.net
Sun Apr 13 03:10:04 CDT 2008


Rolled my own.  I used it to pass capabilities to files and folders,  
but I really didn't think through the UI, so it was pretty crappy.
To give you some idea what I did, you can look at the java code which  
generates the XML.  If I recall right, the serveroperation element was  
included in the capability element.  I used GPG encryption to sign and  
encrypt the capability.  I don't know if that was secure enough,  
perhaps people on the list can give feedback about that.

John

 From Cap.java:

                 return "<capability server='"+capabilityServer+"'  
port='"+port+"'>"+enc+"</capability>";

 From ServerOperation.java

                 String str = "<serveroperation position='"+position 
+"' length='"+length+"' allowed='"+allowedOps+"' actual='"+actualOp+"'  
remove='"+removeOps+"' key='"+key+"'";
                 if (file != null && !file.trim().equals("")) {
                         // System.err.println("Encoding file as  
=============="+file);
                         str += " file='"+file+"'";
                 }
                 str +=">"+enc+"</serveroperation>";

This code was written back in 2002 and 2003, if I have my timeline  
right.

On Apr 12, 2008, at 4:30 PM, Karp, Alan H wrote:

> John Carlson wrote:
>>
>> Okay, I'm familiar with using XML as capabilities.  I've done that
>> myself.
>> No one wants to try SQL as capabilities?  I'm game.  What else do we
>> have to add to SQL to make them capabilities?
>>
> Saying that you're using XML is like saying you're using the  
> alphabet.  Our work uses a standard schema, SAML.  What did you use?
>
> ________________________
> Alan Karp
> Principal Scientist
> Virus Safe Computing Initiative
> Hewlett-Packard Laboratories
> 1501 Page Mill Road
> Palo Alto, CA 94304
> (650) 857-3967, fax (650) 857-7029
> http://www.hpl.hp.com/personal/Alan_Karp
>
> _______________________________________________
> cap-talk mailing list
> cap-talk at mail.eros-os.org
> http://www.eros-os.org/mailman/listinfo/cap-talk



More information about the cap-talk mailing list