As much as I think that Windows NT/2K/XP/2K3 original design is impressive, the implementation is sourly lacking and MS has an annoying tendency to push all of their development resources on ways to screw their clients instead of trying to get the damn thing to work right.
hmm... beyond the questionable ethics of M$, I beleive that the impressive design has a lot to do with the crappiness of the implmentation.
Unix and Unix like systems such as Linux that share the same design philosophy are 'worse is better' systems. I can't really call M$ a 'Right Thing' system, but youyr description of the internal design does invoke that image.
The best set of ACLs can do little good, if a stupid user can crash your main server, by viewing a web page...
IMHO this is the real problem with ACLs - they give you the ability to define a security policy with very fine resolution. But guess - what? it doesn't help you one bit understand what that security policy should be. In a sense, having more options causes more confusion and margin error then solve real problems. This is how I feel, but I'm sure other will disagree :-)
Gilad
================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
