MHonArc v2.5.2 -->
xacml message
[Date Prev]
| [Thread Prev]
| [Thread Next]
| [Date Next]
--
[Date Index]
| [Thread Index]
| [Elist Home]
Subject: RE: [xacml] on postconditions
From: Simon Godik <>
To: 'John Erickson' <>,
Date: Mon, 14 Jan 2002 11:32:34 -0800
Title: RE: [xacml] on postconditions
John,
The way I remember post-conditions discussions is that outcome of
internal postcondition does not affect the outcome of azn decision,
ie, first grant (or deny) is computed and then internal post-condition
is executed. If, for example, pdp fails to add a record
to the log it still returns computed outcome (grant or deny) to the pep.
So the internal post-condition may not be successfully executed by the pdp.
Simon
