OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

xacml message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [xacml] instance of "second proposal for hierarchical resources"

Good question.  In UNIX, a link can by-pass the requirement that a file
have "execute" permissions all the way up to the root, but a link also
has no permissions itself and depends on the permissions assigned to the
linked file itself.

As a starting point, I suggest saying only regular files and directories
are included in <path>, <path>/*, <path>/**, <path>/+, and <path>/++ sets.

I'll do some research tomorrow to see how Java FilePermission (which has
very similar syntax) handles links.


"bill parducci" <bill.parducci@overxeer.com> wrote:
>Date: Thu, 15 May 2003 17:04:12 -0700
>what behavior are you assuming for the pursuit of symbolic links in this 
>example? are they followed?
>is sydney.east.sun.com:/home/aa74233/abc.html in
>abc.html -> /root/abc.html

Anne H. Anderson       Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
Burlington, MA         781-442-0928

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]