Muhammad Masoom Alam wrote:
>> The thing is that how we can combine these two policy sets i.e. RPS
>> and PPS. can i use an 'dont-care' Delegate element in the PPS so that
>> it shall match just to implement role hierarchy.
>>
>
> Sorry, it is clearly written in Profile that if there is 'Dont-care'
> Delegate element then result be 'Indeterminate'.
>
> But could you please give me some hint regarding, how i can implement
> this heirarchy leaving ARBAC .
There is no such thing as a "Don't care" delegate element. "Don't care"
in the tables means that the content of the particular element does not
matter in that specific evaluation case.
/Erik
