xacml-users message

Subject: Re: [xacml-users] Combining algorithms and "AND" and "OR"

From: Anne Anderson <Anne.Anderson@Sun.COM>
To: "Kuketayev, Argyn (Contractor)" <argyn_kuketayev@fanniemae.com>
Date: Wed, 13 Apr 2005 14:43:47 -0400

They are roughly equivalent, but not completely.  They differ from
Boolean AND and OR in operating on 4 values - "Permit", "Deny",
"NotApplicable", and "Indeterminate" - rather than on 2 ("True",
"False").  If "Permit" is treated as equivalent to "True", and "Deny" is
treated as equivalent to "False", and if none of the rules or policies
returns "NotApplicable" or "Indeterminate", then I believe they are
equivalent.

Anne

Kuketayev, Argyn (Contractor) wrote:
> Can I say that "deny-overrides" is equal to multiplication ("AND"
> operator) of results of each rule or policy? Subsequently,
> "permit-overrides" is "OR" operator?
> 
> Thanks,
> Argyn

-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692

References:
- Combining algorithms and "AND" and "OR"
  - From: "Kuketayev, Argyn \(Contractor\)" <argyn_kuketayev@fanniemae.com>