[coyotos-dev] Capability Exchange

[Neal H. Walfield]

At Thu, 01 Jun 2006 10:42:42 -0400,
Jonathan S. Shapiro wrote:
> There is a *proposed* operation to do what I have referred to as an
> "object exchange" between space banks.

This is the second operation I was referring to.


> The idea is that two space banks
> get together and do an even swap of *ownership* of k objects for k
> objects. This doesn't require finding the objects or swapping their
> content. It merely requires knowing the *identity* of the objects (which
> is stored inside their capabilities and is accessible to space bank via
> the range capability). The space bank internally tracks these identities
> already so that it knows what to revoke when the space bank is
> destroyed.

> In the special case where the "k objects" from one side (or both) are
> "all of the objects associated with some sub-bank" we can re-parent the
> bank as well.

This is the first operation I was referring to.

> I don't think that any of this relates to rights amplification, but if
> you can expand on that part of your question I'll try to respond.

It seems to me that these operations requires more than one
capability: one of the space banks is invoked (the can) and the second
is passed as an argument (the can opener).  Since the object state is
usually associated with the receive FCRB, how does the server find the
receive FCRB (so that it can find the object associated with the can
opener) given the sender FCRB it was passed as an argument?  Or would
something completely different happen?

Thanks,
Neal