Policies: Implementation
Trusting someone to drive a car:
- By identity: a list of authorized drivers
- By object: a set of keys to be handed out
- By capability: rent a car with license & insurance
Choice of ëprimary axisí depends on:
- Simplicity: which is the smallest set? bank employees
- Dynamism: avoid enumerating the volatile. drivers
- Efficiency: whatís easiest to check? Licenses
Watch for conflicting policy styles
- Hotel erred in using payment-ability as identity