[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]
Subject: RE: XACML TC Charter Revision - Strawman
What about explicitly allowing for both, i.e. an open world assumption and a closed world assumption? This would allow for the users of our specification to choose the approach that best matched their risk profile. Granted perhaps more work for the group, but I believe there are strong arguments on both sides of this issue. It might even be possible to define XACML in a way that policy specifiers could force a particular behavior based on the nature of the rules specified. >