[cap-talk] Use-case: hybrid capability systems

[Karp, Alan H]

Shap wrote:
>
> In an OS-based cap system I suspect that every proxy object is a
> mediator, because acting as a proxy introduces an extra context switch
> on every call.
>
I'm not so sure in the use case you presented.  Let's say that each user runs in a different context, but there is a single context for the graph.  Can't the personBob object run in the graph context?  Of course, that begs the question of how you deal with many such graphs each running in a different context, but you made the rules, so it's too late to complain.

________________________
Alan Karp
Principal Scientist
Virus Safe Computing Initiative
Hewlett-Packard Laboratories
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
http://www.hpl.hp.com/personal/Alan_Karp