Docs and a bit of cleanup. In particular ALL makes no sense for revocations because they have IDs. In that case you would just revoke the COM.

2017-03-13 06:53:23 -07:00
parent 902807ea50
commit 010d0a7d56
4 changed files with 34 additions and 3 deletions
--- a/node/Capability.hpp
+++ b/node/Capability.hpp
@@ -52,6 +52,11 @@ class RuntimeEnvironment;
 *
 * Note that this is after evaluation of network scope rules and only if
 * network scope rules do not deliver an explicit match.
+ *
+ * Capabilities support a chain of custody. This is currently unused but
+ * in the future would allow the publication of capabilities that can be
+ * handed off between nodes. Limited transferrability of capabilities is
+ * a feature of true capability based security.
 */
 class Capability
 {