Hacker News new | ask | show | jobs
by robertlagrant 1318 days ago
Could you have a system where each capability has its own group, and each executable has capabilities represented by their group memberships? Then it would be easy to build a UI on top of those groups to manage fine-grained permissions.