Access Control

The main principle is to give the least privileges to accomplish a task. If something is broken, the damage may be limited by what the process is allowed to do.

• Users data should be protected so that only the user (and in some cases system administrator) can access the data
• All preferences, including repository connection information, should be covered by access control (file system or other)

Repository Access Control

Low level access control has been implemented in the repository, but it is not being used by higher level code yet.

Access Control and Sharing

This is probably discussed on some sharing or Cosmo page. Links?