This is clearer, and you are right. And let me be clearer before this
subject goes away (which it would have if it was moderated, and I am guilty
of keeping this alive as much asn anyone ;-)).
The notion that "you can't (or shouldn't) enforce social or personnel
policies with security devices" is wrong (as wrong as "you can't legislate
morality"). But it is equally wrong, as Evan points out here, to CREATE
personnel policies through implementing security mechanisms.
THe mechanism should always enforce an existing policy (in a perfect world,
but then we'd not need security policies or mechanisms in a perfect world).
Fred
Avolio Consulting
16228 Frederick Road, PO Box 609, Lisbon, MD 21765
410-309-6910 (voice) 410-309-6911 (fax)
http://www.avolio.com
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
