[Python-Dev] new security doc using object-capabilities (original) (raw)

Greg Ewing greg.ewing at canterbury.ac.nz
Wed Jul 26 08:13:16 CEST 2006


Phillip J. Eby wrote:

> And what about code that needs to pass on a subset of a capability?

With one object == one capability, there is no such thing as a subset of a capability -- the capabilities are the atomic units at which you control access. So you need to make them fine-grained enough to begin with.

-- Greg



More information about the Python-Dev mailing list