Lecture Notes for Capabilities
ECS 235A Fall 2008
Transcribed by Fangqi Sun
Nov 4, 2008
Papers:
•The Confused Deputy, Hardy.
•Access Control, Laurie.
Access control matrix
In computer systems, we have subjects and objects.
•Subjects are typically users or their representative processes.
•Objects are resources such as files and devices.
•Access control is to determine what subjects can access what objects.
Access control policies are most generally defined through access control matrix. The rows
of access control matrix are objects; the columns are subjects; each cell in the matrix records
rights.
Figure 1: Access Control Matrix
1
