>>>>> "Luke" == Luke Howard <[log in to unmask]> writes:
>> I've done a quick test on my desktop installation of Windows XP,
>> and moonshot-ui runs on the whole system, and the RPC interface
>> is accessible by any user at any point. So that's a problem.
Luke> I'm no Windows expert. But, is it possible to run the RPC
Luke> server as the user? And/or perhaps there is a way to bind it
Luke> to a window station? Talking out of my hat here.
What the new CCAPI code in KFW does (I believe written by Jeff Altman,
who definitely has skill in this area) is confirm that the security
IDfor the entity launching the RPC server is the same as the security ID
for the one sending the message. This analysis provided by Alexey.
I think there are a couple of things we need to do here:
1) Make sure we have some solution in the case where there are multiple
users so each gets their own UI
Also, provide security restrictions.
I suspect we'll be in a position to answer these issues shortly.
--Sam
|