RE: [xacml] Version 0.7

MHonArc v2.5.2 -->

xacml message

[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [Elist Home]

Subject: RE: [xacml] Version 0.7

From: Tim Moses <>

To: 

Date: Fri, 30 Nov 2001 11:05:08 -0500

Title: RE: [xacml] Version 0.7

Michiharu - Regarding point 1 ...

Here is my understanding.  It is the responsibility of the PDP to ensure that internal post-conditions are executed successfully before it may return a "permit" saml status code.  Whether it achieves this by means of a local or remote function is not important.  As currently proposed, the function that it performs is described in wsdl.  However, it is an entirely private matter whether it actually uses a Web service with an interface described in wsdl, or some other means to achieve the required end.  Wsdl is merely used as a standard interface definition.

Regarding point 2 ...

You propose adding a capability-style model, in addition to the access-control-style model that is currently described.  It was my understanding that we decided to avoid the capability-style of model early on.  However, even if my recollection is correct, it is possible that we made that decision without full consideration of the consequences.  So, I have included the topic in the list of issues for discussion on Monday.

All the best.  Tim.

-----------------------------------------
Tim Moses
Tel: 613.270.3183