[interfacekit] App_server security

After a conversation at the end of the last administrative meeting, I 
was wondering something about the current decorator scheme which never 
even dawned on me - security. Should we have addons in the app_server 
at all aside from accelerants? If so, how "trusted" should the access 
be? To be a little more specific, I mean that, for example, there is a 
function which returns a pointer to the graphics driver. Should 
decorators be allowed to access this pointer or should there be proxied 
access to it, for fear of doing absolutely stupid things like calling 
delete on it? Decorators at this point can't do something crazy like 
delete all running apps or something, but I wondered if this kind of 
thing is a legitimate concern. Thoughts?

--DW

Other related posts: