[Python-Dev] rexec.py unuseable (original) (raw)

Martin v. Löwis martin at v.loewis.de
Tue Dec 16 15:08:37 EST 2003

Luke Kenneth Casson Leighton <lkcl at lkcl.net> writes:

> I fail to see how ACLs are a sound basis to solve the problem that > rexec solves. ACLs, in my view, are a sound basis to solve a different > problem (that of different identities accessing the same resources).

substitute "identity" for "calling object" i.e. function and i believe that there is a viable proposal.

I don't think so. Suppose I have an object A protected by ACLs. Now I write a new method

def doit(): A.doit()

Question 1. What is the calling object? Question 2. Assuming it is "the doit function", and assuming the doit function is not listed in the ACL: Will the call be executed? If yes: What is the purpose of the ACL then? If no: I believe the proposal is not usable in practice. For example, what should be the ACL on calling open()?

Regards, Martin

More information about the Python-Dev mailing list