Re: [Prothon-user] Prothon security model

Samuel M. Smith <[email protected]> Mon, 12 Apr 2004 23:26:50 -0600
Newsgroups gmane.comp.lang.prothon.devel
Message-ID <[email protected]>
--Apple-Mail-5-447595114
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=ISO-8859-1;
	format=flowed

How about a third bit that if set requires authorization/authentication=20=

  before an access or before the first access. This is a useful defense=20=

against trojan horses. The authentication can also have a time limit at=20=

which reauthentication is required.


As for a name for the security model
How about
deadfall
pitfall
quicksand
trammel
sanctuary


8 entries found for trammel.

tram=B7mel =A0=A0=

--Apple-Mail-5-447595114
Content-Transfer-Encoding: base64
Content-Type: image/jpeg;
	x-unix-mode=0666;
	name="pron.jpg"
Content-Disposition: inline;
	filename=pron.jpg
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--Apple-Mail-5-447595114
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=ISO-8859-1;
	format=flowed

   =A0P=A0=A0=A0Pronunciation Key=A0=A0(tr=

--Apple-Mail-5-447595114
Content-Transfer-Encoding: base64
Content-Type: image/gif;
	x-unix-mode=0666;
	name="abreve.gif"
Content-Disposition: inline;
	filename=abreve.gif

R0lGODlhBwAPAPAAAP///wAAACH5BAEAAAAALAAAAAAHAA8AAAIVhA+BocwIjTtK2ktrarh6/TzR
GBEoADs=

--Apple-Mail-5-447595114
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=US-ASCII;
	format=flowed

m
--Apple-Mail-5-447595114
Content-Transfer-Encoding: base64
Content-Type: image/gif;
	x-unix-mode=0666;
	name="prime.gif"
Content-Disposition: inline;
	filename=prime.gif

R0lGODlhBAAWAPAAAP///wAAACH5BAEAAAAALAAAAAAEABYAAAIOhI+pEcbeQJSq2osvQQEAOw==

--Apple-Mail-5-447595114
Content-Transfer-Encoding: base64
Content-Type: image/gif;
	x-unix-mode=0666;
	name="schwa.gif"
Content-Disposition: inline;
	filename=schwa.gif

R0lGODlhBgAPAPAAAP///wAAACH5BAEAAAAALAAAAAAGAA8AAAIQhI+pe+EWGogSuXtrZhwQFAA7

--Apple-Mail-5-447595114
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=ISO-8859-1;
	format=flowed

l)
n.
		2.  	 Something that restricts activity, expression, =
or progress; a=20
restraint.
	3.  	 A vertically set fishing net of three layers, =
consisting of a=20
finely meshed net between two nets of coarse mesh
tr.v. tram=B7meled, or tram=B7melled tram=B7mel=B7ing, or tram=B7mel=B7lin=
g=20
tram=B7mels or tram=B7mels
	1.  	To enmesh in or as if in a fishing net. See Synonyms at =
hamper1.
	2.  	 To hinder the activity or free movement of.


[Middle English


>
> I'm thinking of using 2-bits for the permission levels:
>
> 0: Guest, website visitor, etc.
> 1: Limited user
> 2: Normal User
> 3: System
>
> Objects like Object, Int prototype, String prototype, etc., would have=20=

> 0
> level read access so everyone could use them, but 3 level write access=20=

> so
> only the system could modify them.  The File object would have 1 level=20=

> read
> access so that guests cannot access files on the system.  We would=20
> obviously
> be fine-tuning these settings as we go along, but it is important to=20=

> get
> started ASAP instead of trying to add it later.
>
> Anyone can start a new thread and set the permission level to their =
own
> level or lower.  One can change their own permission level to lower=20
> only.
> One can change other thread's settings to their own or lower if the=20
> other
> level is lower to begin with.
>
> Comments please?
>
>
> _______________________________________________
> Prothon-user mailing list
> [email protected]
> http://lists.prothon.org/mailman/listinfo/prothon-user
>

--Apple-Mail-5-447595114
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline