RE: [xacml-users] Is the authorization policy and access control policy same in XACML

["Daniel Engovatov" <dengovatov@bea.com>]

In general, "access control" is a slightly more general term that may
also include authentication and audit parts of application security. 

Those terms are also used interchangeably. One may say that XACML is a
language for writing authorization policies that are used for the
purpose of access control. :)

Daniel;


-----Original Message-----
From: grassland [mailto:lijianxin@gmail.com] 
Sent: Sunday, May 07, 2006 7:27 PM
To: xacml-users@lists.oasis-open.org
Subject: [xacml-users] Is the authorization policy and access control
policy same in XACML

 hi, all,
  Recently, I am confused by some concepts in XACML.
who can tell me their differences? the authorization policy and access
control policy.
However, I see some one oftern uses the two term alternately.
who can give me some examples coded with XACML to distinguish them.



thanks.


jarry
_______________________________________________________________________
Notice:  This email message, together with any attachments, may contain
information  of  BEA Systems,  Inc.,  its subsidiaries  and  affiliated
entities,  that may be confidential,  proprietary,  copyrighted  and/or
legally privileged, and is intended solely for the use of the individual
or entity named in this message. If you are not the intended recipient,
and have received this message in error, please immediately return this
by email and then delete it.