How is related work at OMG on Security Administration and Common
Management Facilities ?
What is the granularity of access control on object invocations?
Where are access control lists stored?
How do servers ``know'' what domain to put new objects into and when to create
new security policy domains?
What about transient objects created by factories?
How would access control mechanisms be applied to secure, let's say, naming
service?