Designated authority system
From Erights
(Difference between revisions)
(→Definition) |
|||
| (One intermediate revision not shown) | |||
| Line 5: | Line 5: | ||
If it must: | If it must: | ||
* not only designate the object | * not only designate the object | ||
| - | * but also choose a subset of its (unforgeable) permisions that allow it to perform | + | * not only specify the operation with the object |
| + | * but also choose a subset of its (unforgeable) permisions that allow it to perform that operation with that object | ||
then we say that it is a '''designated authority system'''. | then we say that it is a '''designated authority system'''. | ||
Latest revision as of 09:08, 10 July 2009
Definition
Suppose that some subject tries to perform an operation with some object.
If it must:
- not only designate the object
- not only specify the operation with the object
- but also choose a subset of its (unforgeable) permisions that allow it to perform that operation with that object
then we say that it is a designated authority system.
