[cap-talk] Use-case: hybrid capability systems
Karp, Alan H
alan.karp at hp.com
Mon Feb 11 16:44:04 EST 2008
> In an OS-based cap system I suspect that every proxy object is a
> mediator, because acting as a proxy introduces an extra context switch
> on every call.
I'm not so sure in the use case you presented. Let's say that each user runs in a different context, but there is a single context for the graph. Can't the personBob object run in the graph context? Of course, that begs the question of how you deal with many such graphs each running in a different context, but you made the rules, so it's too late to complain.
Virus Safe Computing Initiative
1501 Page Mill Road
Palo Alto, CA 94304
(650) 857-3967, fax (650) 857-7029
More information about the cap-talk