Re: [xacml] obligations & error conditions

MHonArc v2.5.0b2 -->




















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: Re: [xacml] obligations & error conditions




From: Bill Parducci <>
To: xacml <>
Date: Tue, 13 Apr 2004 15:00:56 -0700






Polar Humenn wrote:

> The Result is Deny. And as currently written (I didn't change the Deny
> part), the spec says it must make a "best-effort" in discharging the
> obligation. It's not an error. Access is denied, no call is made.

then i missed an edit last night somewhere because my intent was to define 
incompressibility of decision as Error. ('skewless')

> Mary's dead, you heartless scowl. :)

i may be a heartless scowl, but i am a deterministically minded heartless scowl ;o)

> Seriously, if we change skew to be equal on Deny as with Permit, I'd happy
> with it.

i will take another shot at this tonight.

b