Re: [xacml-dev] Some queries regarding RBAC and XACML Profile fordelegation.

[Erik Rissanen <mirty@sics.se>]

Muhammad Masoom Alam wrote:

>> The thing is that how we can combine these two policy sets i.e. RPS
>> and PPS. can i use an 'dont-care' Delegate element in the PPS so that
>> it shall match just to implement role hierarchy.
>>
>
> Sorry, it is clearly written in Profile that if there is 'Dont-care'
> Delegate element then result be 'Indeterminate'.
>
> But could you please give me some hint regarding, how i can implement
> this heirarchy leaving ARBAC .


There is no such thing as a "Don't care" delegate element. "Don't care"
in the tables means that the content of the particular element does not
matter in that specific evaluation case.

/Erik