What is your opinion of Reference Monitor? Some softwre vendors are developing eDirectory products, which essentially put all authentication and authorization functions in one central repository. The central repository contains user directory, the access control policy for all applications such as NT network, Unix machines, and database. The will enable the concept of single sign-on for enterprise. Does this concept have similarity to the Reference Monitor Concept? From a security viewpoint, is the idea of eDirectory good design?