Re: [stellation-res] Access control list inheritance behavior question

[Dave Shields <shields@xxxxxxxxxxxxxx>]

On Sun, Sep 29, 2002 at 08:11:23AM -0400, Jonathan Gossage wrote:
> 
> 
> > >
> > >(1) is very inflexible, but it is the easiest to understand.
> One way you could make this more flexible is to take advantage of the
> parent-child relationship between branches. Thus you could apply a change to
> a single branch only, to a branch and all its' children, or to a subset of
> the children of a given parent based on a regular expression matching
> process. This sould retain the conceptual simplicity of (1) but make the
> administrator's job a lot easier. Using yur example, the administrator could
> then say remove checkin priveleges from group g whereever it may appear. I
> would like (1) with the extension I am proposing.
> 

I think "easiest to understand" is the most important property, and agree
with Jonathan's suggestion, except that we may not want to bother with
a regular expression matching, but just allow changes to single branch only, or
to branch and all its children.

dave
-- 
Dave Shields, IBM Research, shields@xxxxxxxxxxxxxx.