Re: Proposal: New CKA_DESTROYABLE attribute

[Stef Walter <stefw@redhat.com>]

On 28.05.2013 11:13, Stef Walter wrote:
> This defines a new boolean attribute CKA_DESTROYABLE. Currently it is
> ambiguous whether CKA_MODIFIABLE objects are destroyable with
> C_DestroyObject.

<snip>

> | o CKR_NOT_DESTROYABLE: An attempt was made to destroy an object
> |   which is may not be destroyed.

Related to this. It does not seem that there is a clear CKR_xxx error
code for when C_SetAttributeValue is called on an object with
CKA_MODIFIABLE = CK_FALSE.

Do we want to define such an error code, and perhaps use it for both
situations? Perhaps something like CKR_NOT_PERMITTED?

Cheers,

Stef