Designated authority system
From Erights
(Difference between revisions)
(→Definition) |
|||
Line 5: | Line 5: | ||
If it must: | If it must: | ||
* not only designate the object | * not only designate the object | ||
- | + | * but also choose a subset of its (unforgeable) permisions that allow it to perform a given operation with this object | |
- | * but also choose a subset of its (unforgeable) permisions that allow it to perform | + | |
then we say that it is a '''designated authority system'''. | then we say that it is a '''designated authority system'''. | ||
- | |||
- | |||
- | |||
- |
Revision as of 10:56, 19 June 2009
Definition
Suppose that some subject tries to perform an operation with some object.
If it must:
- not only designate the object
- but also choose a subset of its (unforgeable) permisions that allow it to perform a given operation with this object
then we say that it is a designated authority system.