OASIS eXtensible Access Control Markup Language (XACML) TC

[xacml] editorial change in Comments

  • 1.  [xacml] editorial change in Comments

    Posted 12-03-2002 18:48
    The proposed text to resolve Comment#61 ("no rules or policies") was not brought into conformance with the resolution to #46 that "No-match" should be used instead of 'Not "Match"'. Here is revised text for #61. This will be in the next release of the Comments.txt collection: CATEGORY: Incomplete. STATUS: Resolved 12/02/02. RESPONSE: Reword Sections 7.6 and 7.7 as in ACTIONS. ACTIONS: 1) Change Section 7.6 Policy Evaluation to: The value of a policy SHALL be determined only by its contents against the request context. A policy's value SHALL be determined by the evaluation of the policy's target and the evaluation of its rules according to the specified rule combining algorithm. The policy's target is evaluated to determine the applicability of the policy. If the target evaluates to "Match" then the value of the policy SHALL be determined by evaluation of the policy's rules according to the specified rule combining algorithm. If the target evaluates to "No-Match", then the value of the policy shall be "NotApplicable". If evaluation of the target raises an "Indeterminate", then the value of the policy SHALL be "Indeterminate". 2) Change Section 7.7 Policy Set Evaluation to: The value of a policy set SHALL be determined by its contents against the request context. A policy set's value SHALL be determined by the evaluation of the policy set's target and the evaluation of its policies and policy sets according to the specified policy combining algorithm. The policy set's target is evaluated to determine the applicability of the policy set. If the target evaluates to "Match" then value of the policy set SHALL be determined by evaluation of the policy set's policies and policy sets according to the specified policy combining algorithm. If the target evaluates to "Not-Match", then the value of the policy set shall be "NotApplicable". If evaluation of the target raises an "Indeterminate", then the value of the policy set SHALL be "Indeterminate". Anne Anderson -- Anne H. Anderson Email: Anne.Anderson@Sun.COM Sun Microsystems Laboratories 1 Network Drive,UBUR02-311 Tel: 781/442-0928 Burlington, MA 01803-0902 USA Fax: 781/442-1692