Muhammad
> -----Original Message-----
> From: Muhammad Masoom Alam [mailto:]
> Sent: Thursday, June 09, 2005 10:08 AM
> To:
> Cc: ; Seth Proctor; argyn
> Subject: [xacml-users] XACML Profile for RBAC
>
>
[skip]
>
> <PolicySet PolicySetId="RPS:managerRole" Combining Algorithm =
> "deny-overrides">
> <PolicySet Combining Algorithm = "permit-overrides">
>
> <PolicySetIdReference>PPPS:managerRole</PolicySetIdReference>
>
> <PolicySetIdReference>DenyPolicy</PolicySetIdReference>
> <!-- Think of it , that it is not present , we can remove it
> no problem at
> all-->
> </PolicySet>
> <Target>
> Role Definition
> </Target>
>
> <PolicySetIdReference>NPPS:managerRole</PolicySetIdReference>
> <!-- This is a Negative Permission Policy reference we can
> also remove it no
> problem at all-->
> </PolicySet>
You are doing this again :) You have more than one policy reference from
RPS.
argyn
