Fwd: [xacml-users] Querying polciies for auditing and reporting purpose

---------- Forwarded message ----------
From: Argyn <>
Date: Jun 26, 2006 5:36 PM
Subject: Re: [xacml-users] Querying polciies for auditing and reporting purpose
To: dhirendra sharma <>


On 6/26/06, dhirendra sharma <> wrote:
> Hi ,
>
>   For auditing purpose, I need to query policy files
> and determine the matching users.
>
> For example,
>         A policy applied to a user - 123 gives him Read
> access to resource R1.
>
>   I need to able to query the polciy store with
> resource parameter R1 and Action parameter Read and I
> should get the userId -123 as answer
>
>
> Does anyone has best recommended approach for this ?

it's not going to work like that.

for example, i had a policy which would let directors and VPs to
update data once a quarter during 2 days. how would you get a list of
users for this situation? it depends on time/date, on current list of
employees and their titles etc.

argyn