OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

xacml-dev message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: Re: [xacml-dev] Deny-override


Seth Proctor wrote:

>On Mon, 2005-05-23 at 12:04, Kuketayev, Argyn (Contractor) wrote:
>  
>
>>I think it just gives the policy writer a little more control on the
>>evaluation sequence, which may impact the performance of the system.
>>    
>>
>
>That's the right idea. The ordered algorithm requires that the elements
>be evaluated in order, while the non-ordered version makes no such
>requirement. In practice, most systems I know of still evaluate in
>order, but if you wanted to change the order for performance reasons (or
>for any other reason), you can with the non-ordered version.
>  
>
one more reason to want to have the policies evaluated in a particular 
order is obligations. obligations in the response can be different 
depending on the order of evaluation of policies.

argyn



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]