model, the web application user can effectively access any world-readable ".dat" file
under the root directory, not just /home/cwe. There is no way to directly specify
permissions that state "fopen cannot access files regardless of this directory." It may be
possible to force this restriction by creating a chroot() jail, although it might not be