Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S262097AbTEROin (ORCPT ); Sun, 18 May 2003 10:38:43 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S262101AbTEROin (ORCPT ); Sun, 18 May 2003 10:38:43 -0400 Received: from pat.uio.no ([129.240.130.16]:57216 "EHLO pat.uio.no") by vger.kernel.org with ESMTP id S262097AbTEROil (ORCPT ); Sun, 18 May 2003 10:38:41 -0400 To: Ingo Oeser Cc: David Howells , Linus Torvalds , David Howells , linux-kernel@vger.kernel.org, linux-fsdevel@vger.kernel.org, openafs-devel@openafs.org Subject: Re: [PATCH] PAG support, try #2 References: <19800.1052933820@warthog.warthog> <20030515131825.G672@nightmaster.csn.tu-chemnitz.de> From: Trond Myklebust Date: 18 May 2003 16:51:27 +0200 In-Reply-To: <20030515131825.G672@nightmaster.csn.tu-chemnitz.de> Message-ID: User-Agent: Gnus/5.0808 (Gnus v5.8.8) XEmacs/21.4 (Honest Recruiter) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-MailScanner-Information: Please contact postmaster@uio.no for more information X-UiO-MailScanner: Found to be clean Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1034 Lines: 21 >>>>> " " == Ingo Oeser writes: > On Wed, May 14, 2003 at 06:37:00PM +0100, David Howells wrote: >> And then you have to have some method of prioritisation. You >> may find that user dhowells has a token for >> (fs=AFS,cell=redhat.com) and group engineering has a token for >> (fs=AFS,cell=redhat.com). Which do you use? > Union of both. And remember to subtract negative ACLs from > positive ACLs. Prioritize users over groups in case of explicit > mention. > This is standard permission checking. > Hmm, sounds too simple, so it must be wrong ;-) Quite. Now that you've done the math, please explain how this should be implemented efficiently. These are *networked* filesystems... Cheers, Trond - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/