Peter TB Brett wrote:
> On 30/06/2016 20:48, Richard Gaskin wrote:
>> My understanding is that Windows lacks true POSIX file-system-level
>> permissions as found in Linux and in Unix flavors like macOS.
>>
>> While it does have file attributes, I believe there is no
>> file-system-level support for granting different rights to different
>> users, and that the difference between users isn't managed in the
>> file system, but in the OS layer above it.
>
> The opposite is true. The Windows filesystem has direct support for
> fine-grained access control lists that provide very good support for
> restricting many types of access to users and groups. It's a system
> that's actually considerable more powerful -- and subtle -- that
> POSIX permissions and, as far as I'm aware, LiveCode doesn't
> currently support accessing or manipulating that data at all.
Given Windows' market share I suppose it's comforting to learn their
file system is more secure than Mac or Linux.
But of course the architecture is one thing; how it's applied is
something else, which is perhaps why we come across so many writers
noting permissions among ongoing issue with Windows, e.g.:
<http://www.pcworld.com/article/202452/why_linux_is_more_secure_than_windows.html>
<http://searchenterprisedesktop.techtarget.com/tip/The-10-most-common-Windows-security-vulnerabilities>
Not being a security expert myself, I'll just continue using OSes with
fewer logged CVEs, and keep my Windows installs in disposable VMs. As
I'd written, being one of the many whose only compromised system was
running Windows, I'm not the person anyone wants writing notes about
Windows issues. Perhaps my opinion of the file system specifically is
unfair with their more recent enhancements, but after decades of seeing
the company favor developer convenience over end-user security my
suspicions have been well-earned.
Back on topic, your description suggests that showing "777" for Windows
files is indeed a bug in LC, since it doesn't accurately reflect the
permissions of the file, yes?
--
Richard Gaskin
Fourth World Systems
Software Design and Development for the Desktop, Mobile, and the Web
____________________________________________________________________
ambassa...@fourthworld.com http://www.FourthWorld.com
_______________________________________________
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode
