OASIS eXtensible Access Control Markup Language (XACML) TC

 View Only

RE: [xacml] AA04: 5.1 PolicySetId explanation clarification

  • 1.  RE: [xacml] AA04: 5.1 PolicySetId explanation clarification

    Posted 10-11-2002 20:08
    Title: RE: [xacml] AA04: 5.1 PolicySetId explanation clarification Anne - I was definitely uncomfortable with the original wording.  But, even your improvement leaves unnecessary room for misunderstanding.  Why not clearly state that it is the PAP's responsibility to ensure that no two policies visible to a PDP have the same identifier?  So, instead of "minimize the potential", why not say "eliminate the possibility"? In practice, PDPs SHALL only accept policies from PAPs that agree to conform to a disjoint identifier assignment scheme and PAPs MUST adhere to their declared scheme.  Yes/No? All the best.  Tim.