xacml — archive

RE: [xacml] summary of Frank's delegation proposal

From: Steve Anderson <[email protected]>
To: [email protected]
Date: Tue, 18 May 2004 18:37:00 -0000

 MHonArc v2.5.0b2 -->
















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: RE: [xacml] summary of Frank's delegation proposal




From: "Steve Anderson" <[email protected]>
To: <[email protected]>,"XACML TC" <[email protected]>
Date: Tue, 18 May 2004 14:41:06 -0400






In Round 2 of your Simple Example, shouldn't it be 
    Can Subjects D=Manager1 and S=Manager2 do Action A to Resource R?
rather than
    Can Subjects D=Manager2 and S=Manager2 do Action A to Resource R?


As far as that goes, I'm not clear why (according to Step 3b) the new Subject corresponding to the Issuer is added to the request, rather than replacing the previous Subject.  In other words (returning to Round 2 of the Simple Example), 

    Can Subject D=Manager1 do Action A to Resource R?

--
Steve Anderson
OpenNetwork