[cap-talk] Can Capabilities be configured?

[John Carlson]

You might be able to configure capabilities with aspects, but aspects tend to violate capabilities.

Look for attenuating capabilities--removing permissions in a deep tree-like structure (like a file system).

John
On Mar 17, 2010, at 11:24 AM, Yuvaraj Athur Raghuvir wrote:

> Hello,
> 
> I have just started looking into Capability based Objects and learning E. I am impressed by how the simple and powerful the Granovetter Diagram is. The E language design is interesting and I am enjoying the way the language has been designed.
> 
> After understanding the difference between the Capabilities and Access Control Lists (ACLs), one question that came up in my mind was how to 'externally configure' capabilities.
> 
> In a way this an oxymoron as capabilities are designed to be granted to enable use. However, in real life situations of software use, it seems that all possibilities of flow of capabilities might not be possible to define up front and so embed that flow in code. It seems to me that ACLs are successful because of the late configuration possibility - the custodians of a resource can decide who has access and this is recorded in a look-up table. 
> 
> Now, 
> 1) Can capabilities be late configured? 
> 2)Will that violate the fundamental principles of how capabilities are designed?
> 3) If late configuration is possible, is there a pattern that shows how this can be done?
> 
> Regards,
> Yuva
> 
> _______________________________________________
> cap-talk mailing list
> cap-talk at mail.eros-os.org
> http://www.eros-os.org/mailman/listinfo/cap-talk

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.eros-os.org/pipermail/cap-talk/attachments/20100407/c220ab5a/attachment.html