These are file based security callbacks. If they do not exist in the SecurityPlugin or if the SecurityPlugin does not exist they they are not used.

These security plugin calls then call the platform api calls

secCanCreatePathOfSize		ioCanCreatePathOfSize		if allowFileAccess return 1, otherwise call isAccessiblePathName
secCanDeletePathOfSize		ioCanDeletePathOfSize		if allowFileAccess return 1, otherwise call isAccessiblePathName
secCanGetFileTypeOfSize		ioCanGetFileTypeOfSize		return 1
secCanListPathOfSize		 	ioCanListPathOfSize		if allowFileAccess return 1, otherwise call isAccessiblePathName
secCanSetFileTypeOfSize	 	ioCanSetFileTypeOfSize		return 1
secDisableFileAccess			ioDisableFileAccess		allowFileAccess = 0
secCanDeleteFileOfSize			ioCanDeleteFileOfSize		if allowFileAccess return 1, otherwise call isAccessibleFileName
secCanOpenFileOfSizeWritable	ioCanOpenFileOfSizeWritable	if allowFileAccess return 1, otherwise call isAccessibleFileName
secCanRenameFileOfSize		ioCanRenameFileOfSize		if allowFileAccess return 1, otherwise call isAccessibleFileName
secHasFileAccess				ioHasFileAccess			return allowFileAccess


isAccessibleFileName			
	check to see if the filename is in the untrustedUserDirectory path
	
isAccessiblePathName
	check to see if the path is in the untrustedUserDirectory path


**MacIntosh**
//os-9/OSXCarbon//
mirror of windows code

//Cocoa://
TBD

**iPhone**
mirror of windows code

**Unix**
rewritten code, handles null terminated character and compares between trusted, untrusted paths and incoming data correctly.

**Windows**
Original code
Check for c:\My Squeak\allowed\..\..\"

**BUGS**
macintosh does not check for ../../../  etc... 
Also macintosh and windows not check lengths properly, see unix version for proper implementation
Also question about encoding, what is encoding for incoming data, versus trusted and untrusted directories

It is quite possible to defeat any sand boxing by coding path level indirection or using tricks like setting up an alias or symbolic link file/directory within the trusted/untrusted directory path.