Fwd: [xacml-users] Combining Algorithms Clarification

---------- Forwarded message ----------
From: Argyn <>
Date: Sep 14, 2006 8:46 AM
Subject: Re: [xacml-users] Combining Algorithms Clarification
To: Dhivya Sivasubramanian <>


you can search this and other lists, we discussed this topic several
timesi n the past.

the fact that xacml implementation uses internally ordered logic for
both ordered and un-ordered combining algorithms doesn't mean that you
can rely on that. you can count on a particular order only with
ordered ones.

argyn

On 9/13/06, Dhivya Sivasubramanian <> wrote:
> Hi all,
> I am new to Xacml.It would be helpful if any one can explain ,
>  What is the rationality for having Deny-Overrides and Ordered Deny
> Overrides Rule/Policy combining algorithm in the xacml
>  specification.According to my understanding, the result of both the
> algorithms will be the same.Or am I missing something?
>  However  one of the implementations like SUN's implementation implements
> both algorithms as ordered , so
>  there does not seem to be a difference.
>
> Thank You,
> Dhivya
>
>