xacml — archive

Re: [xacml] RE: policy model, part 1

From: System
To: [email protected]
Date: Mon, 25 Feb 2002 08:36:00 -0000

Michiharu, I agree with renaming <policy> to something else like <constraints> and renaming <policyStatement> to <rule>. Elements for any subject and any resource are also needed. I also agree that <policyStatement> is a collection of <rule>s. I think predicates are put under <resources>, <subjects>, <actions> to designate certain attribute expressions as targets. For example, if I want to use subject attribute 'administrator' as a target, I put predicate expression administrator=true under <subjects>. Simon