From: Joel VanderWerf <vjoel@...>
Date: 2005-10-09T07:52:27+09:00
Subject: Re: Save the world from evil code crusade

aurelianito wrote:
...
> Each source code file will be asociated with a permission. The current
> permission is the AND of the implies of the permissions of all the
> files in the calling stack.

The call stack would not be enough. Another .rb file might have been
required or loaded, and it (or a method defined in it) may have done
something that allows a method called later to violate its permissions.
For example, the required file might open a file at an insecure
location. The method that did this may no longer be on the stack when
the file is written to (assuming permissions allow writing to an already
open file handle).

-- 
      vjoel : Joel VanderWerf : path berkeley edu : 510 665 3407