MHonArc v2.5.2 -->
xacml message
[Date Prev]
| [Thread Prev]
| [Thread Next]
| [Date Next]
--
[Date Index]
| [Thread Index]
| [Elist Home]
Subject: RE: [xacml] Is authorization decision a postcondition?
From: Tim Moses <>
To: "''" <>
Date: Fri, 30 Nov 2001 08:41:49 -0500
Title: RE: [xacml] Is authorization decision a postcondition?
Hal -
My view is that the PDP won't necessarily evaluate all rules. If it
determines that the policy evaluates to true regardless of the condition of some
(as yet) unevaluated rules, then it should go ahead and return a
"permit" status code. All post conditions associated with rules
that were required to evaluate "true" for the policy to evaluate
"true" must be executed.
All
the best. Tim.
-----------------------------------------
Tim Moses
Tel:
613.270.3183
