OASIS eXtensible Access Control Markup Language (XACML) TC

RE: [xacml] What are we arguing about?

  • 1.  RE: [xacml] What are we arguing about?

    Posted 12-20-2001 15:17
     MHonArc v2.5.2 -->
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    

    xacml message

    [Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


    Subject: RE: [xacml] What are we arguing about?


    Title: RE: [xacml] What are we arguing about?

    Michiharu - I am working on v0.8 of our draft document.  Simon has asked that I include sample policy instances in it.  So, perhaps I can base them on the examples you provide below.

    Briefly, the way around the problem you cite is to nest an "or" inside a "not", like this ...

    <and>
            <role = internalUser>
            <not>
                    <or>
                            time=weekend
                            value greater than $1,000
                    </or>
            </not>
    </and>

    I'll be a bit more rigorous in my sample policy instances.

    All the best.  Tim.

    -----------------------------------------
    Tim Moses
    Tel: 613.270.3183