[cosmo-dev] options to fix security hole

[Grant Baillie]

Hi, Randy et al

I'm a little late on this thread, but after reading things over:

1) My instinct is that having copies of items could get a little  
crazy, so I'm happier with option B. It will probably also mesh a  
little better with ACL, if we ever implement that.

2) The amount of Desktop work suggested seems manageable to me. I may  
regret this statement down the road when I am knee-deep in failing  
tests, though :).

--Grant