Capability

From Erights

(Difference between revisions)
Jump to: navigation, search
m
(The "Picasa web album" example is far too specific for this context; expanding to general description with examples.)
Line 5: Line 5:
== Examples ==
== Examples ==
Some examples of unforgeable capabilities:
Some examples of unforgeable capabilities:
-
* Designations of objects in [[E_language|E]]. Those who hold these capabilities have the permission to invoke any method supported by the designated object.
+
* Designations of objects in the [[E language]]. Those who hold these capabilities have the permission to invoke any method supported by the designated object.
* Designations of functions and procedures in [[Emily]]. Those who hold these capabilities have the permission to call designated functions or procedures.
* Designations of functions and procedures in [[Emily]]. Those who hold these capabilities have the permission to call designated functions or procedures.
Some examples of capabilities that are infeasible to forge:  
Some examples of capabilities that are infeasible to forge:  
* Designations of remote objects in E, such as <tt>captp://*orwqphzlugjwqj2wozz7tmg47ime466j@74.125.87.147:55189/oa6vn5whhapylswhzesdlqh5ppmjkcrq.</tt> Those who hold these capabilities have the permission to invoke any method supported by the designated object.
* Designations of remote objects in E, such as <tt>captp://*orwqphzlugjwqj2wozz7tmg47ime466j@74.125.87.147:55189/oa6vn5whhapylswhzesdlqh5ppmjkcrq.</tt> Those who hold these capabilities have the permission to invoke any method supported by the designated object.
-
* "Invidations for viewing" Picasa web albums, such as <tt>https://picasaweb.google.com/lh/sredir?uname=XXXXXXXXXXXXXXXXXXXXX&target=ALBUM&id=XXXXXXXXXXXXXXXXXXX&authkey=XXXXXXXXXXXXXXXXXXXX</tt>
+
* [[Password capability|Password capabilities]]
 +
** Private URLs where having the URL is necessary and sufficient to use the resource. Common examples are:
 +
*** "Confirm your e-mail address" links for website account registrations and mailing list subscriptions.
 +
*** Shared private documents such as in Google Docs, Google Maps, Picasa albums.
 +
 
 +
{{XXX What exactly do we mean by password capabilities here, such that a captp URL is not one?}}
== See also ==
== See also ==

Revision as of 15:04, 12 April 2011

Definition

A capability is a token that identifies an object and provides its holder with the permission to operate on the object it identifies. Capabilities must either be totally unforgeable or infeasible to forge.

Examples

Some examples of unforgeable capabilities:

  • Designations of objects in the E language. Those who hold these capabilities have the permission to invoke any method supported by the designated object.
  • Designations of functions and procedures in Emily. Those who hold these capabilities have the permission to call designated functions or procedures.

Some examples of capabilities that are infeasible to forge:

  • Designations of remote objects in E, such as captp://*orwqphzlugjwqj2wozz7tmg47ime466j@74.125.87.147:55189/oa6vn5whhapylswhzesdlqh5ppmjkcrq. Those who hold these capabilities have the permission to invoke any method supported by the designated object.
  • Password capabilities
    • Private URLs where having the URL is necessary and sufficient to use the resource. Common examples are:
      • "Confirm your e-mail address" links for website account registrations and mailing list subscriptions.
      • Shared private documents such as in Google Docs, Google Maps, Picasa albums.

Template:XXX What exactly do we mean by password capabilities here, such that a captp URL is not one?

See also

XXX improve this section

See What is a Capability, Anyway? for a partisan explanation of what capabilities actually are.

See also Overview: Capability Computation

This page is a stub; it should be expanded with more information. If doing so, check the original E web site and the mailing list archives for content which could be moved into this page.
Personal tools
more tools