User rights elevation

[jarednichols]

Hi-

A bit off topic, but does anyone have a good reference for how OS X’s user rights elevation model works? I need to give something to some higher-ups and while I can explain it, they like to click on a link and read. I’ve dug around Apple’s basic site and the developer site and there’s nothing that’s a good “middle ground” for non-technical folks.

Anyone have a lead for me?

Thanks
j
---
Jared F. Nichols
Desktop Engineer, Client Services
Information Services Department
MIT Lincoln Laboratory
244 Wood Street
Lexington, Massachusetts 02420
781.981.5436

[#2]

Here's a few links that help describe the authorization service on OS X.
Not sure about the specific information you're looking but this should be a start.

http://www.gigabytes.it/2009/05/mac-os-x-authorization-services/
http://developer.apple.com/mac/library/documentation/Security/Conceptual/authorization_concepts/02au...

[donmontalvo]

Jared, does this URL help?
Jared Nicholes <jared.nichols at ll.mit.edu> wrote:

<http://developer.apple.com/mac/library/documentation/Security/Conceptual/SecureCodingGuide/Articles/AccessControl.html>

Don

[tlarkin]

Are you referring to POSIX compliance with accessing files in OS X?