3 ms·
to be honest, most object-capability security models I've seen ultimately form a precomputed instance of the models described in the article - they are the impl
by p_l 6y ago
to be honest, most object-capability security models I've seen ultimately form a precomputed instance of the models described in the article - they are the implementation detail where simpler capability system replaces the complex matrices of ACLs etc.
- geocar 6y agoThat's my observation as well, but I think this is a shame: It has tremendous advantages for principle security (i.e. the security of the owner of the data, as opposed to the security of the owner of the database). For example: I have a helpdesk, where I need operators to be able to look up the details of users, but only when the user requests it. My users compute the capability string and give it to the helpdesk operator (who cannot merely give it to other helpdesk operators- they have to compute a new capability string showing the chain of custody).