RE: [xacml-users] Access time constraints implementation

["Kuketayev, Argyn \(Contractor\)" <argyn_kuketayev@fanniemae.com>]

> -----Original Message-----
> From: Seth.Proctor@Sun.COM [mailto:Seth.Proctor@Sun.COM] 
> Sent: Wednesday, April 13, 2005 12:01 AM
> To: Kuketayev, Argyn (Contractor)
> Cc: xacml-users@lists.oasis-open.org
> Subject: Re: [xacml-users] Access time constraints implementation
> 

> 
> I don't know how your whole system works, but your approach seems 
> reasonable to me. Basically, it sounds like you want to isolate the 
> time-based rules so it's easier to understand how they effect 
> the rest 
> of the system, and I think that's what you've done.
> 
> 
> seth
> 
> 

Exactly. I'd like to keep time restriction policies separate from the
other policies. 

I did a prototype and it seems working fine. However, I'm not sure if
it's the best solution in terms of performance.