xacml — archive

Re: [xacml] interior node

From: Polar Humenn <[email protected]>
To: [email protected]
Date: Tue, 11 May 2004 19:02:00 -0000

 MHonArc v2.5.0b2 -->

















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: Re: [xacml] interior node <Result> elements for a hierarchy




From: Polar Humenn <[email protected]>
To: XACML TC <[email protected]>
Date: Tue, 11 May 2004 15:05:25 -0400 (EDT)






On Tue, 11 May 2004, Anne Anderson wrote:

> We have decided to retain the XACML 1.1 semantics that a Request
> for multiple nodes SHALL be equivalent to the <Result> elements
> produced by evaluating each requested node individually: i.e. the
> fact.  This means an unambiguous <Result> can be returned for
> each node.  For some types of hierarchy, an interior node will
> get Permit only if all its children get Permit, or will get Deny
> unless all its children get Permit, but this is up to the policy.

How do you indicate the difference?

What if I want a node that only gets Deny, only if all its children are
Deny, and it gets Permit otherwise?

-Polar






Follow-Ups:

Re: [xacml] interior node <Result> elements for a hierarchy
From: Anne Anderson <[email protected]>



References:

interior node <Result> elements for a hierarchy
From: Anne Anderson <[email protected]>






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]