[E-Lang] Java 2 "Security" (was: Re: WelcomeChrisSkalkaandScottSmith of Johns Hopkins)

[Jonathan S. Shapiro]

David Wagner wrote:
> 
> Ben Laurie  wrote:
> >The difference is that if I delegate my identity to a person or program,
> >they can do _anything_ I'm entitled to do according to the ACLs.
> 
> Yeah, so don't do that.  :-)
> 
> There's nothing about ACL's that forces you to do all-or-nothing
> delegation.  In fact, if you look at, say, Unix file permissions (an
> ACL system), delegation is not all-or-nothing: you can hand off just
> read permission, etc.

In fact, if you look at Lampson's paper "Protection", you'll find that
there is no operation permitting you to do that at all.

However, in current ACL *implementations* it is often the case that
setuid/setgid seem like the only solution.


Jonathan