Re: Avoiding IBAC
"Karp, Alan H" <[email protected]>
| Newsgroups | gmane.comp.capabilities.general |
|---|---|
| Message-ID | <8AD823089998C849A832D86972E69CD54195827C@G9W0755.americas.hpqcorp.net> |
Rob Meijer wrote: > > Maybe we should make that seven: > > 5. attenuation : turning a right into a weaker version of that right > suitable for attenuated authorization (delegation). > 6. decomposition : turning a right to a composite into a right to a > component suitable for decomposed authorization (delegation) > 7. logging : keeping track of identities tied to authorizations and > honored requests for accountability purposes. > I can imagine adding a few more, too, but sometimes precision gets in the way of clarity. ________________________ Alan Karp Principal Scientist Enterprise Services, Office of the CTO Hewlett-Packard Company 1501 Page Mill Road Palo Alto, CA 94304 (650) 857-3967, fax (650) 857-7029 http://www.hpl.hp.com/personal/Alan_Karp