[Python-Dev] Re: Capabilities

[Ben Laurie]

Greg Ewing wrote:
> Ben Laurie <ben@algroup.co.uk>:
> 
> 
>>If I understand them correctly, a Zope proxy where the security checker 
>>always says "yes" is a capability. Except, possibly, they may be 
>>forgeable, I don't know them well enough to know.
> 
> 
> A security checker that could be easily forged wouldn't
> be very, er, secure, would it?-)

Its the proxy that needs to be unforgeable. And since their model is 
role-based, I assume its not a fundamental requirement for them.

Cheers,

Ben.

-- 
http://www.apache-ssl.org/ben.html       http://www.thebunker.net/

"There is no limit to what a man can do or how far he can go if he
doesn't mind who gets the credit." - Robert Woodruff