Erik,
> -----Original Message-----
> From: [mailto:] On
> Behalf Of Erik Rissanen
> Sent: Wednesday, October 26, 2011 6:05 PM
> To:
> Subject: Re: [xacml] Hierarchical actions
>
> Do you really need a full hierarchy? That is, several levels of depth.
Yes, see my original use case. Delete implies Write implies ...
> If so, doings something similar to the hierarchical resource profile
> ancestor attributes would be a way to go: "action-ancestor-or-self",
> etc. I guess it could be standardized too.
Yes, so I could build a Documentum-specific PIP that retrieves the values for this attribute.
Thanks,
Ray
