Re: [cobalt-developers] Re: CGI Wrap Errors

[corliss@xxxxxxxxxxxxxxx]

On Thu, 25 May 2000, Will DeHaan wrote:

> RaQs have tiered administrative access based on common groups, "Site
> administrators" we call them.  Many ISPs really like this style of
> access that can't exist with your <G>-so-simple permissions plan.  I
> understand that you don't care about this functionality. 

Perhaps they do or don't like them, the point remains that very little attempt
was made to try to tighten things down.  Even with your user model, there's
better ways to handle it if you just try, which it's obvious you didn't.
These are all reasons why you couldn't pay me to put a Cobalt on a public
network.  They're great for workgroup use in intranets, but I wouldn't trust
them any farther than that.

> This thread is useless unless we're pursuing better permissions on
> Cobalt boxes with the intention of preserving what it is that Cobalt
> boxes do.

Agreed, and that is exactly what started this whole thread--trying to find
more secure configurations.  I've made my suggestions, if they don't work the
way you want, fine, ignore them.

	--Arthur Corliss
	  Programmer/Administrator
	  Gallant Technologies (http://www.gallanttech.com/)