OASIS eXtensible Access Control Markup Language (XACML) TC

 View Only

Errata: Omission in description of "Permit-overrides"PolicyCombiningAlg

  • 1.  Errata: Omission in description of "Permit-overrides"PolicyCombiningAlg

    Posted 07-17-2006 18:30
     MHonArc v2.5.0b2 -->
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    

    xacml message

    [Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


    Subject: Errata: Omission in description of "Permit-overrides"PolicyCombiningAlg


    An addition to the Errata for the next release:
    
    p. 135, line 5312-5320 of XACML 2.0 Core Spec:
    The textual description of the Permit-Overrides PolicyCombiningAlg omits 
    the case where "Deny" is returned.  Correct order should be:
    
        IF any child policy evaluates to "Permit", RETURN "Permit"
        ELSE IF any child policy evaluates to "Deny", RETURN "Deny"
        ELSE IF any child policy evaluates to "Indeterminate", RETURN 
    "Indeterminate"
        ELSE RETURN "NotApplicable"
    
    The pseudo-code includes that case.
    
    Regards,
    Anne
    -- 
    Anne H. Anderson               Anne.Anderson@sun.com
    Sun Microsystems Labs          1-781-442-0928
    Burlington, MA USA
    


    [Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]