Dot Dot Considered Harmful
>If a handle is provided to a directory, it should imply access to resources within that directory (and additionally, their subdirectories).<p>Maybe within Fuschia, but not in my UNIXy systems. All users on a system need r-x on /Users, but that doesn't give them r-x on every user's home directory located as a subdirectoy of /Users - a handle acquired by bob to /Users does not imply access to /Users/delinka.<p>Further, if your process is treating '..' as a subdirectory, you're doing it wrong. Paths must be normalized (e.g. ~ expanded, . and .. resolved) before requesting a handle via absolute path.<p>Lastly, this document reads as if knowing a full path grants access to that path and its subdirectories. If that's the case ... oy.