Re: Avoiding IBAC

Hi, Marc, Alan,

Thanks for your comments!  I haven't looked at the video yet, but I
hope to soon.

One more question:

Based on your description, it seems that the system needs ACLs to
describe the desired policies.  When Alice grants Bob access to a
file, the system needs to check whether Bob is authorized.  So, for
HR-only documents, the administrator needs to add an ACL to the
relevant files (or filter) that says HR can access these files.  Or,
is there a way to do this using capabilities?

Thanks,

Neal