Here is what seems to be happening:
Some specifications are using a resource to define parts of their specifications.
It would be nice to have the mapping of a XACML resource to a WS-Resource since a authorization filter could be thrown on top of the specifications using the WS-Resource with relative ease.
For instance I am a service provider providing WS-Notifications or something else.
I want to add policy enforcement based on my resource definitions.
I look at products that support XACML and throw that in front of my service provider to check the WS-Resource to retrieve groups and policies for the specific resource based on the service client definitions.
Does this make sense?
- Dan
-----Original Message-----
From: Seth Proctor [mailto:]
Sent: Tuesday, September 20, 2005 5:44 PM
To: Daniel Engovatov
Cc: ;
Subject: Re: [xacml-users] XACML Resource Element
On Sep 20, 2005, at 8:40 PM, Daniel Engovatov wrote:
> WS-Resource can be expressed as an XACML resource. XACML resource
> is a
> more generic concept. What we may want is to develop a profile for
> normative mapping.
Umm, yeah. What Daniel said :)
seth
