Re: [xacml-comment] Policies vs. Rules

From
Rich.Levinson <>
Date
2009-03-16T14:50:52+00:00
ID
Thread
Re: [xacml-comment] Policies vs. Rules
Hi all,

 

I have a question about Policies and Rules.

 

I really do not see the reason to distinguish between Policy and Rule. In my
opinion, everything that you can solve with a Policy that has multiple
rules, can also be solved with multiple Policies (where each only has one
single Rule).
The only difference that I see between Rules and Policies are that they map
to different target sets. Meaning that a Rule maps to DENY or PERMIT and a
Policy to DENY, PERMIT and NOT_APPLICABLE (I left away INDETERMINATE). But I
really do not see a practical application for this difference.
Maybe you could give me a hint about what the intent is behind Policies and
Rules?

 

I heard that there is a requirement for Rules.

Could anybody tell me what the requirement for Rules is?

 

Regards,

Florian