[cap-talk] Derivative rights - minor point

[Jed Donnelley]

On 2/4/2008 4:46 PM, Karp, Alan H wrote:
... all stuff I agree with and then:
>  >
> A name plus an intended operation allows you to test the document in the 
> verifier.  The name alone does not.  If an ACL system tells you that the 
> requested operation is denied, you don't know if it's because you don't 
> have permission or because there is no file by that name.  In this case, 
> the name alone carries no authority.

Certainly most ACL systems can tell the difference between
an access being denied because there is no such named object and
an access being denied because the subject isn't on the ACL for
the named object, can't they?  I assume an error indication can
be returned to indicate which was the cause of an error.

--Jed  http://www.webstart.com/jed/