MHonArc v2.5.0b2 -->
xacml message
[Date Prev]
| [Thread Prev]
| [Thread Next]
| [Date Next]
--
[Date Index]
| [Thread Index]
| [List Home]
Subject: RE: [xacml] Proposal on item 7 ConditionReference
From: "Daniel Engovatov" <>
To: "Polar Humenn" <>
Date: Tue, 9 Dec 2003 12:09:18 -0800
>Good point. However, with functions, you only run into problems when
you
>venture from using just the standard functions. Then you are on your
own,
>and that has always been the case.
I guess that is what I was always looking for - standard way to specify
usage of extension functions. I do not like being o my own. :)
>You are looking for something else in order to specify the calculation
of
>the request context, but let us not complicate the argument here for
>simple variable definition and reference within a policy.
Agree. I do not object to the proposal to use references to typed
expressions within policy. Just when trying to define a reusable
structure for all components of an authorization system, I found current
XACML lacking, as it only really describes the rule evaluation part,
while the context definition and reusability is, in my practice, an even
harder problem to address. But that is indeed another discussion.
Daniel.
