Re: [xacml] Groups - XACML v3.0 improved generality,working draft 03 (access_control-xacml-3.0-generalization-spec-wd-03.doc)uploaded

Colleagues,

I finally read this working draft, and I think it has value.  I agree
with Tim that it is a generalization of XACML that not only allows
organizations to leverage their investments in XACML for broader types
of policies, but also is a cleaner abstraction for handling the XACML
access control "effect" requirements, which XACML now splits between
"effect" and "obligation", while still being unable to express certain
types of desired outcomes of an access request.

While I think the current version needs considerable discussion and
elaboration, I would like to see us continue work in this direction.

Anne

 wrote:
> The document named XACML v3.0 improved generality, working draft 03
> (access_control-xacml-3.0-generalization-spec-wd-03.doc) has been submitted
> by Tim Moses to the OASIS eXtensible Access Control Markup Language (XACML)
> TC document repository.
> 
> Document Description:
> Added definitions for the , ,  and  elements and the  attribute
> 
> View Document Details:
> http://www.oasis-open.org/apps/org/workgroup/xacml/document.php?document_id=11929
> 
> Download Document:  
> http://www.oasis-open.org/apps/org/workgroup/xacml/download.php/11929/access_control-xacml-3.0-generalization-spec-wd-03.doc
> 
> 
> PLEASE NOTE:  If the above links do not work for you, your email application
> may be breaking the link into two pieces.  You may be able to copy and paste
> the entire link address into the address field of your web browser.
> 
> -OASIS Open Administration

-- 
Anne H. Anderson             Email: 
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692