Access Control: take them from Novell Netware

Posted Nov 18, 2010 20:38 UTC (Thu) by jra (subscriber, #55261)
In reply to: Access Control: take them from Novell Netware by Fowl
Parent article: Ghosts of Unix past, part 3: Unfixable designs

> Ah, I get you. It's the implementation that's the problem, not the concept.

No, with Windows ACLs it's the concept.

Look at this:

http://www.pcguide.com/ref/hdd/file/ntfs/secRes-c.html

as an example. Explain that to a user. Don't forget to include why the sort order of DENY's ACE's depends on where in the file hierarchy they came from.

Good luck ! :-)

Jeremy.

Access Control: take them from Novell Netware

Posted Nov 21, 2010 0:31 UTC (Sun) by Fowl (subscriber, #65667) [Link]

You recurse up the tree, until you find an applicable entry, with deny taking precedence over allows.

How is that complicated?