[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [xacml-dev] Some Doubts On Indeterminate Result With 3.0.
Hi Asela, You are correct when you doubt whether the PDP would want to send these extended Indeterminate values back to the PEP. These values are only for internal PDP processing of some of the combining algorithms, which is mentioned in the spec, but could possibly be more explicit to avoid developers being uncertain about whether they are returned to the PEP, which they are not. In the current version of the spec: http://docs.oasis-open.org/xacml/3.0/xacml-3.0-core-spec-en.pdf the extended Indeterminate is discussed in section 7.10, which explicitly says: "3503 The final decision returned by a PDP cannot be an extended Indeterminate. Any such decision at the top level policy or policy set is returned as a plain Indeterminate in the response from the PDP."It is also discussed in section C.1: "5392 ... For these algorithms, the PDP MUST keep track of the extended set of “Indeterminate” values during rule and policy combining.I can see where the above text would possibly leave one wondering whether the Extended values are returned or not. However, as it says in section 7.10, they are not returned, so hopefully that will address your issue. Thanks, Rich On 7/18/2012 3:19 AM, Asela Pathberiya wrote: Hi devs, |
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]