Knowledge Driven Security
- Predecessors
-
UserBasedAuthorization
- Task Description
-
Create a chainable security engine (compatible with IPListSecurityEngine) which permits per-kb-type, per-KB, per-Class, per-Slot, per-Facet and per-Individual security controls. The security engine would be more robust if included in PyOKBC (rather than tacked on at the Nooron level) but this is unclear. This is a large task and perhaps ought to be broken up into smaller bites. The first priority is to ensure that transformers can't be hijacked to perform arbitrary operations on disk. The second priority is to ensure that arbitrary read and write operations can't be performed under the aegis of KB reading and writing.
- TaskMotivation
-
The benefits of the expected security include: very fine grain, secure enough for public use, flexible enough for public use.
- Estimated Hours
-
20
- References
-
- Status
-
future
- slot_display_order
-
$Id: frame.html,v 1.6 2003/07/09 16:35:13 smurp Exp $
Show Source
|
available garments:
:THING
frame:
html
frame_details:
html
available actions:
put_frame_details.html
delete_frame.html
|