Group Ownership (was RE: Private Authority)

[thomas@xxxxxxxxxxx]

On Thu, 06 September 2001, "Andy Nolen-Parkhouse" wrote:

> The easiest way to avoid authority lookups would be to have fairly
> restrictive public authority and rely upon the object's primary group or
> have a group profile own the object.


Although it's easy, definite care should be taken when deciding whether a group 
profile that supplies authority should also be the owner of the objects. 
Special and particular care should be taken for group profiles of programmers.

Wherever possible, I would recommend having a separate owner profile that does 
nothing but act as owner. Allowing rights of an owner to be available to the 
group members can be serious trouble (especially with programmers).

Tom Liotta

--
Tom Liotta
The PowerTech Group, Inc.
19426 68th Avenue South
Kent, WA 98032
Phone  253-872-7788
Fax  253-872-7904
http://www.400Security.com


___________________________________________________
The ALL NEW CS2000 from CompuServe
 Better!  Faster! More Powerful!
 250 FREE hours! Sign-on Now!
 http://www.compuserve.com/trycsrv/cs2000/webmail/