[cap-talk] "ambient authority" on wiki.erights.org
John Carlson
john.carlson3 at sbcglobal.net
Thu Jun 11 22:25:09 EDT 2009
On Jun 11, 2009, at 3:26 PM, Mark Miller wrote:
>
>
> On Thu, Jun 11, 2009 at 3:11 PM, Karp, Alan H <alan.karp at hp.com>
> wrote:
> I don't think any of the definitions I've seen so far capture what
> to me is the essential nature of ambient authority, the separation
> of designation from authorization. I think the following captures
> that point.
>
> "A system in which the submitter of a request does not specify which
> permissions to apply to the request is said to use ambient
> authorities."
>
> I like that too!
>
> I'd change to "...which of its permissions to apply...".
>
>
> I'm not sure if "does not" should be "need not" or "must not."
>
> Hmmm. I'm not sure either. I think I like "does not" best, but I'm
> not sure I can say why.
So in the math world, this would be:
Ambient Authority: The mathematician need not specify the operator or
operands in an expression which has an operator and operands. The
mathematician may evaluate the expression and get a response without
knowledge of the operator or the operands.
Designated Authority: Before the mathematician may apply an
operator, the mathematician must have an operator and an associated
operand (designated as a symbol together) granted to the
mathematician. Other operands are optional, and may be applied at the
time the expression is evaluated.
Now I'll step out on a limb:
In the ambient authority world, anything may be an operator or an
operand. They are indistinguishable. In the designated authority
world, things have been given meaning (permission to apply an
operator to an operand).
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.eros-os.org/pipermail/cap-talk/attachments/20090611/0d3db2cb/attachment.html
More information about the cap-talk
mailing list