Re: Outreach via wikipedia articles on authentication and authorization
"Karp, Alan H" <[email protected]>
| Newsgroups | gmane.comp.capabilities.general |
|---|---|
| Message-ID | <8AD823089998C849A832D86972E69CD53E6BDA63@G4W3222.americas.hpqcorp.net> |
Markm wrote: è Fine grain entities have short lifetimes. That's usually the case but irrelevant to the point I was trying to make. Bob may be an ephemeral object responsible for moving all of Carol's money to an off-shore account. If Carol has no independent knowledge of Bob, she better follow the delegation chain to find somebody she can hold responsible if something goes wrong. If she can't find anyone, she may not be able to let Bob take that action. I believe (no code yet) that I've worked out a pattern for the cloud management product I'm working on in which each delegation is to a caretaker that has list containing the full delegation chain. Basically, each delegation adds the delegator's Who to the list. Responsibility tracking will be essentially free. There are privacy concerns with this approach in the general case that don't arise here because of the way the contracts are written. ________________________ Alan Karp Principal Scientist Enterprise Services, Office of the CTO Hewlett-Packard Company 1501 Page Mill Road Palo Alto, CA 94304 (650) 857-3967, fax (650) 857-7029 http://www.hpl.hp.com/personal/Alan_Karp _______________________________________________ cap-talk mailing list [email protected] http://www.eros-os.org/mailman/listinfo/cap-talk