MHonArc v2.5.0b2 -->
















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: RE: [xacml] XACML Profile for Hierarchical Resources, WD 8




From: "Daniel Engovatov" <dengovatov@bea.com>
To: <Anne.Anderson@Sun.COM>
Date: Thu, 16 Sep 2004 14:10:58 -0700







I agree.  Any reasonable implementation will do it the right way anyway,
and policies do not depend on it.  Let's not break anything accidentally
at this point.

Thank you.

Daniel;

>I made no changes for this, and also did not add any comments
>about "don't compute ancestors by recursively computing parents".
>The Profile does not say how to compute the "resource-ancestor"
>or "resource-ancestor-or-self" attribute.  The current semantic
>description precludes multiple instances of the same normative
>identity of any node in a "resource-ancestor" or
>"resource-ancestor-or-self" attribute, so I would rather minimize
>the changes at this point, and not start introducing
>implementation notes.  I think the current semantic description
>is sufficient.














[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]