Finer-grained Alternative to Ruby Safe Levels

Finer-grained Alternative to Ruby Safe Levels

[Ripta Pasay]

Hello,

I couldn't locate any mention of this subject on the mailing lists or
Google, or in the latest code in trunk.

I'm unsure whether there was a specific reason $SAFE levels provide rigid
control, so I was wondering about core's view on a finer-grained
alternative to ruby's $SAFE levels. I'm thinking of Java's
SecurityManager[1], although that's only one specific implementation that
might not be the best for ruby's dynamic nature.

[1] http://java.sun.com/j2se/1.5.0/docs/api/java/lang/SecurityManager.html


Cheers,

-Ripta

Re: Finer-grained Alternative to Ruby Safe Levels

[Yukihiro Matsumoto]

Hi,

In message "Re: Finer-grained Alternative to Ruby Safe Levels"
    on Sun, 10 Feb 2008 14:07:34 +0900, Ripta Pasay <ruby@r8y.org> writes:

|I'm unsure whether there was a specific reason $SAFE levels provide rigid
|control, so I was wondering about core's view on a finer-grained
|alternative to ruby's $SAFE levels.

Because I'm unsure whether there was a specific reason to provide
finer-grained access control of methods, despite the difficulty of
complete implementation.

							matz.