xacml — archive

RE: [xacml] Re: policy model, part 1

From: Anne Anderson <[email protected]>
To: [email protected]
Date: Thu, 14 Feb 2002 17:44:00 -0000

On 14 February, Tim Moses writes: RE: [xacml] Re: policy model, part 1 > Anne - Is your concern at all alleviated by the fact that there is a > specified meta-policy, identified within the ruleStatement, that has to be > identical to the meta-policy identified in all the other rules with which > the rule can be combined? This should ensure that a rule-writer can deduce > what the effect of his or her rule will be. All the best. Tim. The following concern is alleviated: > Accommodating extensible semantics at the rule or referenced > policy level, where those semantics affect the base policy > evaluation, is incompatible with efficient hierarchical, > distributed policy evaluation. I had several other concerns that are independent. I have not had a chance to read your new 0.9 spec (THANKS!!!!) to see if my other concerns are addressed. Anne -- Anne H. Anderson Email: [email protected] Sun Microsystems Laboratories 1 Network Drive,UBUR02-311 Tel: 781/442-0928 Burlington, MA 01803-0902 USA Fax: 781/442-1692