"my favorite of them all is that there are check boxes for both allow and deny permissions. You cannot check both boxes, but you can uncheck them both, it means that you neither allow nor deny them those permissions, which really means that you deny them"

I don't mean to be pedantic, but there is a big difference between having 'Allow' and 'Deny' unchecked and checking 'Deny'. To be honest this difference adds to your point about complexity, I know that a lot of people starting out in this area have trouble because they forget about 'Deny' over riding 'Allow' permissions granted elsewhere.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/326/31936#31936