MHonArc v2.5.0b2 -->
xacml message
[Date Prev]
| [Thread Prev]
| [Thread Next]
| [Date Next]
--
[Date Index]
| [Thread Index]
| [List Home]
Subject: negating target matches
In a recent conversation someone asked my why there aren't "not-equal"
functions to go with all the "equal" functions. I naively responded that
you can always use the "not" function, but he explained that he wanted
this for Target Matching, e.g. "match any subject who doesn't have this
name" or "match any access not for this server."
It got me thinking about Targets...we have some of the obvious boolean
operations covered (we can say "and" and "or"), but we don't have
negation. I'm loathe to bring this up when we're already so far along on
2.0, but I'm curious what other people think. What's your opinon about
having a flag (or something) that negates a TargetMatch?
In a related vein, I'm somewhat surprised that new functions haven't
been proposed for 2.0. Does anyone have any new functions that they
think would be useful? In the afore-mentioned conversation I was asked
about some of the standard string functions like concatination,
substring, etc. (thinking back, these are functions that I've also
wanted to use in policies). I've only been thinking about this for a
short time, but I think they would be useful...anyway, I wanted to get
some opinions on that too.
I'll get back to my real work now :)
seth
[Date Prev]
| [Thread Prev]
| [Thread Next]
| [Date Next]
--
[Date Index]
| [Thread Index]
| [List Home]