OASIS eXtensible Access Control Markup Language (XACML) TC

 View Only

Re: [xacml] instance of "second proposal for hierarchical resources"

  • 1.  Re: [xacml] instance of "second proposal for hierarchical resources"

    Posted 05-16-2003 06:11
    Good question.  In UNIX, a link can by-pass the requirement that a file
    have "execute" permissions all the way up to the root, but a link also
    has no permissions itself and depends on the permissions assigned to the
    linked file itself.
    
    As a starting point, I suggest saying only regular files and directories
    are included in <path>, <path>/*, <path>/**, <path>/+, and <path>/++ sets.
    
    I'll do some research tomorrow to see how Java FilePermission (which has
    very similar syntax) handles links.
    
    -Anne
    
    "bill parducci" <bill.parducci@overxeer.com> wrote:
    >Date: Thu, 15 May 2003 17:04:12 -0700
    >what behavior are you assuming for the pursuit of symbolic links in this 
    >example? are they followed?
    >
    >
    >is sydney.east.sun.com:/home/aa74233/abc.html in
    >
    >file://sydney.east.sun.com/home/aa74233/++
    >
    >if
    >
    >abc.html -> /root/abc.html
    >
    >?
    >
    >b
    
    Anne
    ------
    Anne H. Anderson       Anne.Anderson@Sun.COM
    Sun Microsystems Laboratories
    Burlington, MA         781-442-0928