RE: access control information (formerly... Strawman)

From
Polar Humenn
Date
2001-06-12T08:45:00+00:00
ID
Thread
RE: access control information (formerly... Strawman)
One question, are you talking about having authorization information
included in credentials stating a persons particular bank balance?

-Polar

On Mon, 11 Jun 2001, Simon Y. Blackwell wrote:
> The problem with "insufficient funds to access" is it requires an
> understanding of the meaning of the constraint "balance > $5,000". (Yes, I
> know by policy example was not precisely in this form ...). To avoid the
> requirement that the policy engine actually understand the semantics of the
> constraint, I suppose it could return "balance < ?required-amount" which
> would only require programming the policy engine such that it understood the
> semantics of some finite set of operators. It still gets pretty ugly though.
>
> >