Re: Access Control Model draft - conditions for proceeding with operation

[Rob Byrne <Robert.Byrne@Sun.COM>]

Richard V Huber wrote:
> 
> Section 5.4 contains the paragraph: "If they are all granted then the
> operation MAY proceed.".  Section 5.5 contains the similar paragraph
> "If this permission is granted, then the operation MAY proceed.".
> 
> I don't understand why these are both MAYs.  If all the necessary
> permissions from the access control model are there, the operation MUST
> proceed from an access control point of view.
> 
> There may be other conditions (size/time limits, etc.) that keep the
> operation from proceeding and it might be good to mention them here,
> but MAY still seems inappropriate from an access control point of
> view.  I could live with "If they are all granted, the operation is
> allowed from an access control point of view."
> 
> Rick Huber

Rick,

Good man...you spot something that was left deliberately vague, explain
why and then suggest how to fix it!

Will make appropriate modif.

Rob.