Hacker News Reader

There's plenty of actually granular permissions; they're just not used by anyone.

How many people on Windows create separate user accounts, run programs as those accounts (hello runas), & set ACLs?

Not many, but I have found Sandboxie to be quite useful for this purpose.

It’s not user friendly

It sure isn't. Although its competition is stuff like chmod (way less granular), and SELinux, and SELinux isn't winning any usability competitions either.

Reply on news.ycombinator.com