On Tue, 2010-08-03 at 11:48 -0400, Farrukh Najmi wrote:
> Hello,
...
> It is clear in to me (and in the regrep 4 specs) how XACML 2.0 can be
> use to secure access to RegistryObjects at the entire object level.
> It is not clear to me how the regrep 4 specs could define performing
> access to specific sub-elements and attributes of RegistryObjects.
> This is where I am requesting your guidance on suggested patterns or
> best practices.
>
I believe you might find what you seek in the Hierarchical resource
profile of XACML v2.0. Basically you need a hierarchical representation
of you RegistryObjects and their sub-elements.
/Ludwig
--
Ludwig Seitz, PhD | Axiomatics AB
Training & Development | Skeppsbron 40
Phone: +46 (0)760 44 22 91 | SE-111 30 Stockholm
Mail: | Sweden
