[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: FW: Policy assertion
I would expect a policy can be more than one assertion. Any counter-arguments? --------------------------------------------------------------------------- Dr. Kenneth Laskey MITRE Corporation, M/S H305 phone: 703-983-7934 7515 Colshire Drive fax: 703-983-1379 McLean VA 22102-7508 From: Oestreicher, Donald (PEROT) [mailto:Donald.Oestreicher@va.gov] Ken, Can’t a policy be one or more assertions? The 2009 OASIS Reference Architecture draft mentioned “polices are subjective assertions made by…” and “attribute assertions are evaluated according to the constraints in the authorization policy” From: Ken Laskey [mailto:klaskey@mitre.org] Don, There is currently no definition for policy assertion. The operative definition for policy is: A policy is an assertion made by a stakeholder which the stakeholder commits to uphold and, if possible and necessary, enforce through stated constraints. The term assertion is being used in its typical dictionary definition and so won’t itself be defined. Ken --------------------------------------------------------------------------- Dr. Kenneth Laskey MITRE Corporation, M/S H305 phone: 703-983-7934 7515 Colshire Drive fax: 703-983-1379 McLean VA 22102-7508 From: Oestreicher, Donald (PEROT) [mailto:Donald.Oestreicher@va.gov] Ken, Is there a published definition by OASIS for policy assertion? Donald Oestreicher (Dell Perot Systems) Product Development - Product Assessment Compentency Division Office: (703) 349-5948 Cell : (703) 403-4471 |
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]