JBoss Community

Access control notes

new comment by Heiko Braun View all comments on this document

Reading through your examples again, I think this one shouldn't be supported:

 

do rights to the referrer grant rights to the referent

 

If you don't have the same rights on both ends (which is what the sentence implies) it should be considered an illegal constraint and access to the the referent not be granted. Eventually we shoud veen take it further and consider the role as illegal (unusable) when it is associated with illegal secuty rules.