[OpenAFS] Re: Ideas for finer grain set acl controls

Derrick Brashear shadow@gmail.com
Wed, 11 Nov 2009 14:50:18 -0500


oint we would specify a volume level negative right,
>>>
>>> Negative rights:
>>> =A0system:anonusers idwka
>>
>> Why do you need a group, as opposed to simply mapping 32766 to a name?
>
> Yes, I suppose just a way to represent ANONYMOUSID (32766) would
> work, but the system: prefix seems intuitive to me and more
> consistent with system:anyuser and system:authuser.

Well, those are groups of identities: "all authenticated users" or
"all authenticated users plus anonymous", anonymous is but one
identity!


--=20
Derrick