Skip to main content
Software Engineering

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

3
  • Thanks for your answer. It sounds to me as though implementing this feature in PHP may be not be useful, or even practical. Your example regarding restricting function calls is not something that would need to be checked on server side code where most of the features are only under administrative control. Just to clarify that point though, in an environment such as ASP.NET running under IIS, do permission checks have any place in an application (server) whose primary purpose is to serve web pages? In other words, is code access ever needed to be checked in a secured environment? Commented Aug 16, 2015 at 21:37
  • @Flosculus In some Wiki systems or Webapps, there might be user-supplied code that must be sandboxed. However, sandboxes are more important on the Desktop. Java was developed with the expectation that “applets” would catch on: small programs that could be downloaded from the web and be safely run in a sandbox. That dream has been shattered w.r.t. Java, Silverlight, and Flash, but JavaScript continues to be a popular sandbox environment on the web, due to a different set of tradeoffs. Commented Aug 16, 2015 at 21:50
  • I understand. Also after looking up the CAS system on dotnet/corefx and finding nothing but references to its deprecation, it doesn't look like something I need to worry about. Thanks again, you probably saved me many hours of wasted time lol Commented Aug 16, 2015 at 21:55