RE: Limiting Client Access - Partial Retraction

["Patrick Botz" <botz@xxxxxxxxxx>]

John,

I am invoking the god given right to make a partial retraction of my last
note...After thinking about the last couple of exchanges over 6 medium-hot
Buffalo Wild Wings and a beer, I realized...

I fell into the trap that I HATE falling into and hate when others fall
into it. That is the trap of speaking as if the word "secure" means the
same thing to everyone. I did that in all of these posts and I apologize.

So, for my retraction...
I agree that it is possible to meet the requirements of a "rational"
security policy by using exit point programs or products.

I still argue that for the highest possible security, object level access
control is required. In other words, you can't attain the highest possible
level of security on your system without object level access control. That
said, it is obviously not everyone's requirement to attain the highest
possible level of security.

Perhaps I should go back to lurking...:-)

Patrick Botz