Re: [xacml-dev] Deny-override

On May 25, 2005, at 9:21 PM, argyn wrote:
> one more reason to want to have the policies evaluated in a  
> particular order is obligations. obligations in the response can be  
> different depending on the order of evaluation of policies.

That's absolutely right. If you want deterministic use of  
Obligations, then you need to use ordered algorithms.


seth