Mark S. Miller wrote: >At 05:56 AM Tuesday 1/23/01, Jonathan S. Shapiro wrote: >>There really is a valid argument for some form of ACL here. > >[Use separately revocable capabilities] What's the difference? (It's not transferability: ACL's and capabilities both have the same power with respect to giving a copy of your privileges to others.)