Re: [xacml-comment] Add <Rule> evaluation description

Yes, I think you are right. Thanks for pointing this out.

Regards, Erik

xiaofeng03 wrote:

>Dear XACML Committeeㄛ 
>  
>I have some comments about XACML Administrative Policy draft.
>
>In last comment, I said the specification should add <Rule> evaluation description. Now, I realize it must be added to the specification, otherwise it will not complete. For example, given a administrative request, there are two  rules, A and B. The effect of A is deny and the effect of B is permit. If the administrtive request satisfy the constraints of A and B. Because the specification can't support negative administriave policies, the A's result should be discarded. 
>  
>  
>Best Regards 
>  
>Li XiaoFeng 
>Email:xiaofeng03 (at) iscas (dot) cn   lxf (at) is (dot) iscas (dot) ac (dot) cn 
>Department:LOIS,Institute of Software Chinese Academy of Sciences 
>Address:4# South Fourth Street, Zhong Guan Cun, Beijing,P.R. CHINA 
>  
>2006-07-28 
>  
>