MHonArc v2.5.0b2 -->
xacml message
[Date Prev]
| [Thread Prev]
| [Thread Next]
| [Date Next]
--
[Date Index]
| [Thread Index]
| [List Home]
Subject: RE: [xacml] summary of Frank's delegation proposal
From: "Steve Anderson" <>
To: <>,"XACML TC" <>
Date: Tue, 18 May 2004 14:41:06 -0400
In Round 2 of your Simple Example, shouldn't it be
Can Subjects D=Manager1 and S=Manager2 do Action A to Resource R?
rather than
Can Subjects D=Manager2 and S=Manager2 do Action A to Resource R?
As far as that goes, I'm not clear why (according to Step 3b) the new Subject corresponding to the Issuer is added to the request, rather than replacing the previous Subject. In other words (returning to Round 2 of the Simple Example),
Can Subject D=Manager1 do Action A to Resource R?
--
Steve Anderson
OpenNetwork
