Again, I don't quite understand this. Could you provide an example or
elaborate?
However, it is possible to do a lot with custom policy combining
algorithms. I implemented my experimental delegation in XACML 1.1 using
obligations and a custom policy combining algorithm.
Best regards, Erik
Anne Anderson wrote:
> Erik?
>
> Regards,
> Anne
>
> ------------------------------------------------------------------------
>
> Subject:
> [xacml-comment] Public Comment
> From:
>
> Date:
> Mon, 29 May 2006 12:22:35 +0000
> To:
>
>
> To:
>
>
> Return-path:
> <xacml-comment-return-231-Anne.Anderson=>
> Received:
> from sml-sfvt2a.sfvic.sunlabs.com ([152.70.2.220]) by
> mail-srv.sfvic.sunlabs.com (Sun Java System Messaging Server 6.1
> HotFix 0.02 (built Aug 25 2004)) with ESMTP id
> <> for
> ; Mon, 29 May 2006 05:22:58
> -0700 (PDT)
> Received:
> from sfbaymail1sca.SFBay.Sun.COM ([129.145.154.35]) by
> mail-swan.sfvic.sunlabs.com (Sun Java System Messaging Server 6.1
> HotFix 0.02 (built Aug 25 2004)) with ESMTP id
> <> for
> (ORCPT
> ); Mon, 29 May 2006 05:22:58 -0700 (PDT)
> Received:
> from sunmail2.sfbay.sun.com (sunmail2.SFBay.Sun.COM [129.149.246.180])
> by sfbaymail1sca.SFBay.Sun.COM (8.12.10+Sun/8.12.10/ENSMAIL,v2.2) with
> ESMTP id k4TCMwtx020565 for <>; Mon, 29 May
> 2006 05:22:58 -0700 (PDT)
> Received:
> from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM
> [129.149.246.28]) by sunmail2.sfbay.sun.com
> (8.11.7p1+Sun/8.11.7/ENSMAIL,v2.2) with ESMTP id k4TCMwu11651 for
> <@sunmail2.sfbay.sun.com:>; Mon, 29 May 2006
> 05:22:58 -0700 (PDT)
> Received:
> from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by
> nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2 (built
> Dec 2 2004)) id <> for
> (ORCPT ); Mon, 29 May 2006
> 05:22:55 -0700 (PDT)
> Received:
> from brmea-mail-3.sun.com ([192.18.98.34]) by
> nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2 (built
> Dec 2 2004)) with ESMTP id
> <> for
> (ORCPT ); Mon, 29 May 2006 05:22:54 -0700 (PDT)
> Received:
> from relay21.sun.com (relay21.sun.com [192.12.251.14] (may be forged))
> by brmea-mail-3.sun.com (8.12.10/8.12.9) with ESMTP id k4TCMrfG000831
> for <>; Mon, 29 May 2006 06:22:54 -0600 (MDT)
> Received:
> from mms26es.sun.com (mms26es.sun.com [150.143.232.114]) by
> relay21.sun.com with ESMTP for ; Mon, 29 May 2006
> 12:22:53 +0000 (Z)
> Received:
> from relay23.sun.com (relay23.sun.com [192.12.251.54]) by
> mms26es.sun.com with ESMTP for ; Mon, 29 May 2006
> 12:22:51 +0000 (Z)
> Received:
> from mail.oasis-open.org ([209.202.168.106] [209.202.168.106]) by
> relay23.sun.com for ; Mon, 29 May 2006 12:22:51
> +0000 (Z)
> Received:
> (qmail 13849 invoked by uid 508); Mon, 29 May 2006 12:22:38 +0000
> Received:
> (qmail 13840 invoked by uid 60881); Mon, 29 May 2006 12:22:38 +0000
> Sender:
> xacml-comment-return-231-Anne.Anderson=
> Reply-To:
>
> Message-ID:
> <>
> MIME-Version:
> 1.0
> Content-type:
> TEXT/PLAIN
> Content-transfer-encoding:
> 7BIT
> Precedence:
> bulk
> Delivered-to:
> mailing list
> Mailing-List:
> contact ; run by ezmlm
> X-PMX-Version:
> 5.1.2.240295
> List-Post:
> <mailto:>
> List-Subscribe:
> <mailto:>
> List-Unsubscribe:
> <mailto:>
> List-Help:
> <mailto:>
> X-No-Archive:
> yes
> Original-recipient:
> rfc822;
>
>
> Comment from:
>
> Name: Alt. Solution II
> Title: IT-architect
> Organization: ISK, ITST, MVTU
> Regarding Specification: XACML v3.0 administrative policy
>
> A remark on page 9: Has there been any consideration on using XACML as is?
>
> Delegation is one policy reformulated into a policy set and split into two policies.
>
> The Policy-Combining algorithm is given the existence of the original policy as a prerequisite.
>
> The first of the new policies describes the rule constraining the relation between the original holder and new.
>
> The second of the new policies describes the rule constraining the relation between the new holder and the original resource.
>
> Kind Regards
> Per-Olav Gramstad
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:
> For additional commands, e-mail:
>
>
>
> ------------------------------------------------------------------------
>
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail. You may a link to this group and all your TCs in OASIS
> at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
