xacml — archive

RE: [xacml] on postconditions

From: System <[email protected]>
To: [email protected]
Date: Mon, 14 Jan 2002 14:34:00 -0000

 MHonArc v2.5.2 -->
















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [Elist Home]








Subject: RE: [xacml] on postconditions




From: Simon Godik <[email protected]>
To: 'John Erickson' <[email protected]>, [email protected]
Date: Mon, 14 Jan 2002 11:32:34 -0800






Title: RE: [xacml] on postconditions





John,


The way I remember post-conditions discussions is that outcome of
internal postcondition does not affect the outcome of azn decision,
ie, first grant (or deny) is computed and then internal post-condition
is executed. If, for example, pdp fails to add a record
to the log it still returns computed outcome (grant or deny) to the pep.


So the internal post-condition may not be successfully executed by the pdp.


Simon