1997Q2/
<!-- MHonArc v2.4.4 -->
<!--X-Subject: Re: [MUD&#45;Dev]  Re: Player coding and security -->
<!--X-From-R13: Eunja Vnycraal <znynpunvNvanzr.pbz> -->
<!--X-Date: from fabius.globecomm.net [207.51.48.6] by in1.ibm.net id 864322897.50908&#45;14 Thu May 22 17:41:37 1997 CUT -->
<!--X-Message-Id: 33847463.41C67EA6#iname,com -->
<!--X-Content-Type: text/plain -->
<!--X-Reference: 199705212237.PAA06897#xsvr3,cup.hp.com -->
<!--X-Head-End-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<html>
<head>
<title>MUD-Dev message, Re: [MUD-Dev]  Re: Player coding and security</title>
<!-- meta name="robots" content="noindex,nofollow" -->
<link rev="made" href="mailto:malachai#iname,com">
</head>
<body background="/backgrounds/paperback.gif" bgcolor="#ffffff"
      text="#000000" link="#0000FF" alink="#FF0000" vlink="#006000">

  <font size="+4" color="#804040">
    <strong><em>MUD-Dev<br>mailing list archive</em></strong>
  </font>
      
<br>
[&nbsp;<a href="../">Other Periods</a>
&nbsp;|&nbsp;<a href="../../">Other mailing lists</a>
&nbsp;|&nbsp;<a href="/search.php3">Search</a>
&nbsp;]
<br clear=all><hr>
<!--X-Body-Begin-->
<!--X-User-Header-->
<!--X-User-Header-End-->
<!--X-TopPNI-->

Date:&nbsp;
[&nbsp;<a href="msg00693.html">Previous</a>
&nbsp;|&nbsp;<a href="msg00695.html">Next</a>
&nbsp;]
&nbsp;&nbsp;&nbsp;&nbsp;
Thread:&nbsp;
[&nbsp;<a href="msg00685.html">Previous</a>
&nbsp;|&nbsp;<a href="msg00594.html">Next</a>
&nbsp;]
&nbsp;&nbsp;&nbsp;&nbsp;
Index:&nbsp;
[&nbsp;<A HREF="author.html#00694">Author</A>
&nbsp;|&nbsp;<A HREF="#00694">Date</A>
&nbsp;|&nbsp;<A HREF="thread.html#00694">Thread</A>
&nbsp;]

<!--X-TopPNI-End-->
<!--X-MsgBody-->
<!--X-Subject-Header-Begin-->
<H1>Re: [MUD-Dev]  Re: Player coding and security</H1>
<HR>
<!--X-Subject-Header-End-->
<!--X-Head-of-Message-->
<UL>
<LI><em>To</em>: <A HREF="mailto:mud-dev#null,net">mud-dev#null,net</A></LI>
<LI><em>Subject</em>: Re: [MUD-Dev]  Re: Player coding and security</LI>
<LI><em>From</em>: Shawn Halpenny &lt;<A HREF="mailto:malachai#iname,com">malachai#iname,com</A>&gt;</LI>
<LI><em>Date</em>: Thu, 22 May 1997 12:29:23 -0400</LI>
<LI><em>Sender</em>: <A HREF="mailto:rsh#iname,com">rsh#iname,com</A></LI>
</UL>
<!--X-Head-of-Message-End-->
<!--X-Head-Body-Sep-Begin-->
<HR>
<!--X-Head-Body-Sep-End-->
<!--X-Body-of-Message-->
<PRE>
clawrenc#cup,hp.com wrote:
&gt; 
&gt; In &lt;<A HREF="msg00661.html">33830715.41C67EA6#iname,com</A>&gt;, on 05/21/97
&gt;    at 08:30 AM, Shawn Halpenny &lt;malachai#iname,com&gt; said:
&gt; 
&gt; &gt;There were a few posts a couple weeks back, most substantively from
&gt; &gt;Chris Lawrence (I think), where inheritance was explored as a
&gt; &gt;security model.
&gt; 
&gt; Yup.  Dat's me.  Essentially I take Cool's per-object security model
&gt; (each object and method determines its own security criteria), and
&gt; provide APIs for easy testing of the inheritance tree of the
&gt; method-caller and message-source (who originated the event) as the
&gt; basis of determining validity of access.

I just pulled down the Cool security stuff for later perusal.  I suppose
at
this point I'm mostly directionless with regards to security on user-
programming and hope to spark something that pushes me one way or
another.
  
&gt; &gt;How many of us are looking to have some
&gt; &gt;form of user-programming anyway?
&gt; 
&gt; Me.
&gt; 
&gt; &gt;And to what degree are things
&gt; &gt;user-programmable, for that matter?
&gt; 
&gt; I don't impose limits in the server.  The DB may model various limits
&gt; and attempt to impose them on the rest of the DB.  As such I put
&gt; damned near nothing that is game-oriented in the server proper (ie the
&gt; server has no concept of containment, command parsing, placement, or
&gt; context).  Everything devolves to the DB.

Does that imply that a user can come along, and, say, take a small,
no-frills
bag and turn it into a big bag that hides its magical contents from the
rest
of the world?  That is, the user has mostly free reign to tack on code
that enhances objects in the world (depending on what the security of
that bag allowed)?

You'd earlier posted a bit about how a user could code up a 50000hp
damage
wet noodle, but when using it nothing of the sort would happen.  I was
wondering how does the noodle make the determination that that sort of
thing shouldn't be done in this context?

--
Shawn Halpenny

"Caesar si viveret, ad remum dareris"
                            - Latin for All Occasions

</PRE>

<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<HR>
<!--X-Follow-Ups-End-->
<!--X-References-->
<UL><LI><STRONG>References</STRONG>:
<UL>
<LI><STRONG><A NAME="00685" HREF="msg00685.html">Re: [MUD-Dev]  Re: Player coding and security</A></STRONG>
<UL><LI><EM>From:</EM> clawrenc#cup,hp.com</LI></UL></LI>
</UL></LI></UL>
<!--X-References-End-->
<!--X-BotPNI-->
<UL>
<LI>Prev by Date:
<STRONG><A HREF="msg00693.html">Re: [MUD-Dev]  Virtual rooms (was: RP thesis...)</A></STRONG>
</LI>
<LI>Next by Date:
<STRONG><A HREF="msg00695.html">Re: [MUD-Dev] Re: Administrative notes</A></STRONG>
</LI>
<LI>Prev by thread:
<STRONG><A HREF="msg00685.html">Re: [MUD-Dev]  Re: Player coding and security</A></STRONG>
</LI>
<LI>Next by thread:
<STRONG><A HREF="msg00594.html">Re: [MUD-Dev]  Re: Resets and repops</A></STRONG>
</LI>
<LI>Index(es):
<UL>
<LI><A HREF="index.html#00694"><STRONG>Date</STRONG></A></LI>
<LI><A HREF="thread.html#00694"><STRONG>Thread</STRONG></A></LI>
</UL>
</LI>
</UL>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
<ul><li>Thread context:
<BLOCKQUOTE><UL>
<LI><strong><A NAME="00597" HREF="msg00597.html">Re: Player coding and security</A></strong>, 
Jeff Kesselman <a href="mailto:jeffk#tenetwork,com">jeffk#tenetwork,com</a>, Mon 19 May 1997, 23:51 GMT
<UL>
<LI><strong><A NAME="00661" HREF="msg00661.html">Re: [MUD-Dev]  Re: Player coding and security</A></strong>, 
Shawn Halpenny <a href="mailto:malachai#iname,com">malachai#iname,com</a>, Wed 21 May 1997, 21:30 GMT
<UL>
<LI><strong><A NAME="00678" HREF="msg00678.html">Re: [MUD-Dev]  Re: Player coding and security</A></strong>, 
Nathan Yospe <a href="mailto:yospe#hawaii,edu">yospe#hawaii,edu</a>, Thu 22 May 1997, 01:23 GMT
</LI>
<LI><strong><A NAME="00685" HREF="msg00685.html">Re: [MUD-Dev]  Re: Player coding and security</A></strong>, 
clawrenc <a href="mailto:clawrenc#cup,hp.com">clawrenc#cup,hp.com</a>, Thu 22 May 1997, 05:34 GMT
<UL>
<LI><strong><A NAME="00694" HREF="msg00694.html">Re: [MUD-Dev]  Re: Player coding and security</A></strong>, 
Shawn Halpenny <a href="mailto:malachai#iname,com">malachai#iname,com</a>, Fri 23 May 1997, 00:41 GMT
</LI>
</UL>
</LI>
</UL>
</LI>
</UL>
</LI>
<LI><strong><A NAME="00594" HREF="msg00594.html">Re: [MUD-Dev]  Re: Resets and repops</A></strong>, 
Shawn Halpenny <a href="mailto:malachai#iname,com">malachai#iname,com</a>, Mon 19 May 1997, 23:12 GMT
<UL>
<LI><strong><A NAME="00632" HREF="msg00632.html">Re: [MUD-Dev]  Re: Resets and repops</A></strong>, 
Nathan Yospe <a href="mailto:yospe#hawaii,edu">yospe#hawaii,edu</a>, Wed 21 May 1997, 01:18 GMT
</LI>
</UL>
<UL>
<li>&lt;Possible follow-up(s)&gt;<br>
<LI><strong><A NAME="00615" HREF="msg00615.html">Re: [MUD-Dev]  Re: Resets and repops</A></strong>, 
Jeff Kesselman <a href="mailto:jeffk#tenetwork,com">jeffk#tenetwork,com</a>, Tue 20 May 1997, 11:10 GMT
</LI>
</UL>
</LI>
<LI><strong><A NAME="00583" HREF="msg00583.html">Re: [MUD-Dev]  CORBA</A></strong>, 
Jeff Kesselman <a href="mailto:jeffk#tenetwork,com">jeffk#tenetwork,com</a>, Mon 19 May 1997, 09:18 GMT
</LI>
</UL></BLOCKQUOTE>

</ul>
<hr>
<center>
[&nbsp;<a href="../">Other Periods</a>
&nbsp;|&nbsp;<a href="../../">Other mailing lists</a>
&nbsp;|&nbsp;<a href="/search.php3">Search</a>
&nbsp;]
</center>
<hr>
</body>
</html>