[Pipet Devel] Security model

[jarl van katwijk]

>
> > > 1d- DL's can connect to multiple BL's.
>
> By means of the DL layer again?  Or directly?

Directly.

>
>
> > > 1e- BL nodes (or: VSH subnets) can communicate
> > > with other BL nodes
> > >        only if both nodes have the same parent
> > > DL.
>
> Meaning the BL nodes are local?

No, a DL can connect to multiple BL's, so it can create nodes on
remote systems too.

>
> > > 2a- a DL authenticates other DL's for access to
> > > its nodes\subnets.
> > > 2b- DL's can connect to other DL's and
> > > upload\download XML
> > >        documents outof and into.
> > > 2c- No DL can connect to the root DL, so no
> > > non-root DL has ability 2a.
>
> I don't get it.  If the root DL is the first to connect, how can another DL
> connect?  Nothing can connect to the root DL.

OK, but the root DL is the only DL that can grant other DL's access.
This 'root' will practically be most of the time invisible to the user.
So it must open up the BL for at least one other DL
for VSH to be usable :)