OASIS eXtensible Access Control Markup Language (XACML) TC

 View Only

Re: [xacml] Proposed semantics for operations involving INDETERMI NATE

  • 1.  Re: [xacml] Proposed semantics for operations involving INDETERMI NATE

    Posted 07-24-2002 01:02
     MHonArc v2.5.2 -->
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    

    xacml message

    [Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


    Subject: Re: [xacml] Proposed semantics for operations involving INDETERMI NATE


    > Well, our current model, in your example, policies 1,2,3, and 5 would say
    > Indeterminate, while #4 says Permit. However, if #5, by some crystal ball,
    > may return a Deny. If that is really your intent, then you need to wrap
    > the combination of policies with the Bill Parducci Policy Combinator which
    > only gives yields Permit if every policy evaluates to Permit.
    
    my combinator permits NO ONE -- the ultimate in security!! :o)
    
    b
    


    [Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


    Powered by eList eXpress LLC