Security is simple either via net or java

Post #18,378 by boxley 11/15/01 12:02:44 AM Reply	Security is simple either via net or java cause proper programming will take security into consideration. Bad programming will make no assumptions about security. psuedo code on *********************** while true need a system call ! check if I have permission if not error and gag the executable if true execute with username/passwd or whatever works on this box and OS end fi *********************** end psuedo coded thanx, bill write a security class or a get module wether doing tops or woops :) thanx, bill tshirt front "born to die before I get old" thshirt back "fscked another one didnja?"
Post #18,393 by ben_tilly 11/15/01 8:40:44 AM Reply	That is a procedural model of security A model that works much better for OO programming is to put all of your security checks in your object constructors. After that, if you have the object then you have permission to make the request and should be allowed to, with no muss, no fuss. The mental model here is that possession of the object is possession of the keys. This model is known as a capability model. You can find some good [link\|http://www.eros-os.org/essays/00Essays.html\|introductory essays] from the EROS project, and for more reading the design of the GNU Hurd project is somewhat similar in concept. Cheers, Ben
Post #18,405 by bluke 11/15/01 10:57:49 AM Reply	Actually J2EE uses a declarative model Basically when you deploy your EJB you include a deployment descriptor which states who can access it (ACL based). You can put restrictions on the EJB or on individual methods. The developer writes no security code, the underlying J2EE app server intercepts all calls to the EJB and verifies that they are allowed.
Post #18,425 by tseliot 11/15/01 12:56:31 PM Reply	Hmmm...got any other links? I've done some looking into this topic for my own apps, but it seems prohibitively difficult to try implementing this without OS support for it built in. Any app-level links? --------------------------------- A stupid despot may constrain his slaves with iron chains; but a true politician binds them even more strongly by the chain of their own ideas;...despair and time eat away the bonds of iron and steel, but they are powerless against the habitual union of ideas, they can only tighten it still more; and on the soft fibres of the brain is founded the unshakable base of the soundest of Empires." Jacques Servan, 1767
Post #18,885 by ben_tilly 11/19/01 9:05:38 PM Reply	Sorry... I have seen application-specific links, but they tend to be to dead projects, etc. By and large it seems that if you want to use this strategy in building an application, it seems to work fairly nicely. (I have done it on a small scale, and was happy.) But you wind up having to build a certain amount of infrastructure, and there don't seem to be a lot of available components structured in this way. So it is a design idea that I think is useful, even without OS/language support. But I don't have any good links on that. Cheers, Ben

Welcome to IWETHEY!