Re: [xacml] BTG sequence diagram

[Paul Tyson <phtyson@sbcglobal.net>]


> On Fri, 2011-04-22 at 16:32 -0700, Bill Parducci wrote:
> So Rich, in this scenario you are treating the BTG priv attribute as a Resource? If not, what does "permit" refer to?
> 
> thanks
> 
> b
> 
> On Apr 22, 2011, at 4:25 PM, rich levinson wrote:
> 
> > 	• The PEP in front of GlassMgr asks the PDP if this User is authorized to activate
> > his BTG priv.
> > 	• The PDP says yes, the User, according to Policy is authorized to perform this
> > action (activate the User's BTG priv), and returns Permit.
> 

I had in mind a generic "BTG state", which I guess would be an
environment attribute.  The user invokes a method of the GlassManager
like "breakGlass()".  Upon finding that the user is authorized to
execute this action, the GlassManager executes this method to set the
environment attribute, btg-state, to "true".

In an earlier email I asked for clarification on what, exactly, the
glass protected: a person, a class of persons, a resource, a group of
resources, or some combination of these?

I guess generically you could have a boolean btg-state attribute for
every action, resource, and subject (as well as an environment
btg-state).  Then the user would invoke a method like "breakGlass('Bart
Simpson')" to unprotect Bart Simpson's records.  The PIP would ask for
the btg-state attribute pertaining to Bart's records.

This is another area that needs to be clarified in David's BTG proposal.

Regards,
--Paul