OASIS eXtensible Access Control Markup Language (XACML) TC

26. Define policy reduction (partial evaluation) of a policy

  • 1.  26. Define policy reduction (partial evaluation) of a policy

    Posted 10-27-2003 18:13
     MHonArc v2.5.0b2 -->
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    

    xacml message

    [Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


    Subject: 26. Define policy reduction (partial evaluation) of a policy


    Issues raised during discussion at F2F 21 Oct 2003:
    
    This item was closed for XACML 2.0.  The Grid requirements can be
    met by giving the evaluating PDP access to necessary attributes
    and sub-policies.
    
    PROPOSAL: http://lists.oasis-open.org/archives/xacml/200310/msg00042.html #26
    
    1. The internal, parsed representation of a policy may not be
       reversible to create a new reduced XACML Policy or PolicySet
       instance.
    
    2. The resulting policy will rarely be simple enough to be much
       help in analysis or debugging: most of the policy will still
       contain references to missing attributes.
    
    Anne
    -- 
    Anne H. Anderson             Email: Anne.Anderson@Sun.COM
    Sun Microsystems Laboratories
    1 Network Drive,UBUR02-311     Tel: 781/442-0928
    Burlington, MA 01803-0902 USA  Fax: 781/442-1692
    
    


    [Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]