Now, instead of changing the fundamentals of the operating system, we should base our changes on the basic needs of the user to get the job done. We should create a simple security feature template with few settings to allow for flexibility. For this to happen, three layers of security would need to be implemented: Those accounts would be users, groups, and the rest of the world, each with less authority than the last. This is how web browsers classify networks today. Now data shared between these systems, both private and public, would be better accommodated in three different parts of the file system. Those file systems are documents, including my documents, shared documents, and public documents. This offers the advantage of being able to combine secure data stored in familiar locations. This makes it easier for users to identify each security element and how to find their files. The rest can be managed by administrators and other authorized groups according to security policies
tags