[cap-talk] top-to-bottom

[ross mcginnis]

I've been wondering if you had a top-to-bottom cap based desktop what sort of user account management system would be best implemented (this is w.r.t a typical personal use computer with users in an every day setting, not somethin.
 
Would you emulate the traditional root/superuser account paradigm where only one single entity has the authority to create and manage all the other accounts (presumably this could be emulated by designing an account creation object which is a trusted code object that tightly holds a create-user cap)?
Or perhaps design something more fluid (and a very big break from standard) such as where you have a deliberately free create-user cap and if any user possesses it they can create a new user and also they can discretionally choose whether to pass the cap onto the newly created user or not?
 
What other sort of arrangements are possible- eg, could you replace the concept of user with some other concept? 
 
This also raises other design questions regarding related issues such as removing accounts.
 
Just Wondering...
Ross.
_________________________________________________________________
Net yourself a bargain. Find great deals on eBay.
http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Frover%2Eebay%2Ecom%2Frover%2F1%2F705%2D10129%2D5668%2D323%2F4%3Fid%3D10&_t=763807330&_r=hotmailTAGLINES&_m=EXT