Re: Ev2 and Authz

On 17.04.2012 19:48, Branko Čibej wrote:
> The related right is called "directory traversal" and is, indeed,
> orthogonal to read and write permissions on directories (which are
> usually further split into read/write contents and read/write
> attributes). It is a property of directories, not leaf objects.
>

To clarify: the difference between "traverse" and "read (contents)"
permisions for directories is quite important. If you're allowed to
traverse, but not read, you have to know the path of a subordinate
object in order to be able to access it, modulo the object's own
permissions. In other words, you cannot discover the names of
subordinate objects by reading the directory contents.

-- Brane
Received on 2012-04-17 19:53:00 CEST