Re: [xacml] Re: "else" is what ? Was:Re: [xacml] Generalizing on-permit-apply-second

From
Bill Parducci <>
Date
2013-05-24T05:30:02+00:00
ID
Thread
Re: [xacml] Re: "else" is what ? Was:Re: [xacml] Generalizing on-permit-apply-second
On May 23, 2013, at 6:05 PM, Steven Legg <> wrote:

>> Ok. So to make sure that I am fully grasping this, the proposal is that this new mechanism only applies to PolicySets (not Policies)
> 
> Correct. The on-permit-apply-second combining algorithm is only defined as a
> policy combining algorithm.
> 
> and that these PolicySets will have a new requirement that Policy order is required to be maintained within them. Is this correct?
> 
> Yes, the order is significant (even in the current draft).

Thanks Steven. I believe this marks a bit of a shift in our approach as it the first situation where there is different processing logic between Policy and PolicySet and the requirement for order of Policy processing. 

b