Hello,

   I was wondering if anyone could help me with a few more questions on the ACL 
sandbox code.


   I was wondering why not have the AccessControlEntry interface deal with 
Atomic permissions instead of a Cumulative Permission 
- is this due to a performance issue?

   I was wondering why not do the following in AccessControlEntry interface:

    /**
     * Get  the atomic
     * permissions for this ACE.
     * 
     * @return
     */
    public Permission[] getPermissions();

    /**
     * Returns a single integer mask. It is
     * expected to be a sum of the atomic 
     * permissions  in this ACE.
     * 
     * @return 
     */
    public int getMask();

    /**
     * Get the pattern for this ACE
     * 
     * @return 
     */
    public String getPattern()


   I was also wondering about the isGranting() method.  When would a permission 
not be granting?  I changed
the interface to the following so I could delegate to the ACE for checking 
permissions for a sid:

   public boolean isGranting(int mask, Sid sid);


Thanks for all the help.

-Nate


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Home: http://acegisecurity.org
Acegisecurity-developer mailing list
Acegisecurity-developer@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/acegisecurity-developer

Reply via email to