xacml — archive
RE: [xacml] Version 0.7
MHonArc v2.5.2 -->xacml message
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]
Subject: RE: [xacml] Version 0.7
- From: Tim Moses <[email protected]>
- To: [email protected]
- Date: Fri, 30 Nov 2001 11:05:08 -0500
Title: RE: [xacml] Version 0.7
Michiharu - Regarding point 1 ...
Here is my understanding. It is the responsibility of the PDP to ensure that internal post-conditions are executed successfully before it may return a "permit" saml status code. Whether it achieves this by means of a local or remote function is not important. As currently proposed, the function that it performs is described in wsdl. However, it is an entirely private matter whether it actually uses a Web service with an interface described in wsdl, or some other means to achieve the required end. Wsdl is merely used as a standard interface definition.
Regarding point 2 ...
You propose adding a capability-style model, in addition to the access-control-style model that is currently described. It was my understanding that we decided to avoid the capability-style of model early on. However, even if my recollection is correct, it is possible that we made that decision without full consideration of the consequences. So, I have included the topic in the list of issues for discussion on Monday.
All the best. Tim.
-----------------------------------------
Tim Moses
Tel: 613.270.3183