Re: FSCopyObjectAsync: useless and crippled
Re: FSCopyObjectAsync: useless and crippled
- Subject: Re: FSCopyObjectAsync: useless and crippled
- From: James Bucanek <email@hidden>
- Date: Sat, 14 May 2005 11:31:02 -0700
Dave Rehring wrote on Friday, May 13, 2005:
>Actually, I think the all-or-nothing part of Apple's authentication services
>is the lame part. Either I give an app carte blanche to do whatever as root
>or the operation executes as the current user.
Apple's authentication services provides a framework for arbitrarily fine-grained control over permissions (read up on the policies framework). The problem is that no one ever takes the time to set it up. They just ask for authentication services for "root" and start whacking away.
The other problem is that OS X / Next is built on BSD. And, like in most Unix systems, one's permission environment (file access, process UIDs, etc.) is based solely on your current EUID. So to change permissions for any of the underlaying Unix APIs, you only have one choice -- first change your EUID -- which changes the premissions for everything your process can do. The only alternative I see would be to dump Unix.
--
James Bucanek <mailto:email@hidden>
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Cocoa-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden