This post originated from an RSS feed registered with Ruby Buzz
by Daniel Berger.
Original Post: win32-security in the works
Feed Title: Testing 1,2,3...
Feed URL: http://djberg96.livejournal.com/data/rss
Feed Description: A blog on Ruby and other stuff.
I've decided that rather than inline a bunch of security code in the win32-file library (as is done now), it would be better to abstract the Windows security model (ick) into its own library. To that end Heesob and I have been working on a win32-security library which I'm modeling loosely on a combination of Perl's Win32::Security module and Python's win32security library.
What a pain, though. ACL style permissions are definitely more complicated than simple unix file permissions, but the upside is that they can be applied to more than just files, such as processes and networking.
I've decided to order a (used, cheap) copy of Programming Windows Security (Addison-Wesley), too, because none of my Windows' books cover security in anything more than a superficial manner.
The plan for the first release is to include three classes:
This is similar to the Perl module, but where I plan to differ from the Perl module (in one case, anyway) is that I have no intention of creating ACE type subclasses on the fly as Toby does. The type information (which is just a numeric value, actually) will be stored internally and made accessible to the end user.