← Prev in month ← Prev in thread

Deny-override

From
Panayiotis Periorellis <>
Date
2005-05-23T16:00:01+00:00
ID
Thread
Deny-override
I have been reading through the 2.0 specification and I came across an
issues which is unclear regarding the deny-overrides and
ordered-denyoverrides cobmining algorithms.

The ordered-deny-overrides is speficied as :=20

"The behavior of this algorithm is identical to that of the
Deny-overrides rule-combining algorithm with one exception. 
The order in
which the collection of rules is evaluated SHALL match the order as
listed in the policy."

What is the difference from the standard deny-overrides and what
difference does the ordering make?

Looking forward to your replies.

panos
← Prev in month ← Prev in thread