MHonArc v2.5.0b2 -->
















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: delegation constraints schema




From: Simon <sgodik@gluecode.com>
To: xacml@lists.oasis-open.org
Date: Fri, 22 Apr 2005 09:37:42 -0700






(See Erik's msg on delegation constraint)
Delegation constraint can be expressed by having <DelegationConstraint> 
element as a child of <Delegate>

Note that constraints on immediate delegate can be applied to 
re-delegates and then delegation-constraint is not needed.

<Target>
    <Delegate>
       <SubjectMatch>....</SubjectMatch> <- ONE OR MORE (Constraints on 
immediate delegate)
       <DelegationConstraint>   <-- OPTIONAL (Constraints on re-delegates)
          <SubjectMatch>....</SubjectMatch>   <-- ONE OR MORE
          <SubjectMatch>...</SubjectMatch>
       </DelegationConstraint>
    </Delegate>
</Target>

Simon






Follow-Ups:

Re: [xacml] delegation constraints schema
From: Erik Rissanen <mirty@sics.se>








[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]