Re: [xacml-users] Chronicle Attribute

[David Chadwick <d.w.chadwick@kent.ac.uk>]

HI Seth

Your suggestion is precisely what we do NOT want to do. The PEP should 
not need to look inside the obligation attribute assignements. The 
obligation ID should tell it which service to call, and the Chronicle 
tells it when to call it.

regards

David


Seth Proctor wrote:
> On Fri, May 25, 2007 at 11:07:31AM -0700, Daniel Engovatov wrote:
>> [...] 
>> It is a slippery slope.  Obligation is a black box.   Selecting some
>> particular facet to standardize - be it "when", or "how", or "why" or
>> who should sign off, or how many times to try, will not make obligations
>> any more interoperable - and should not be part of a standard.  At the
>> very least it should be very generic - folks may want some different
>> time ontologies to be used in other applications.
> 
> I completely agree with Daniel on this. I've seen many ways people want to
> use Obligations, and there are many similar one-offs that could be added.
> The whole point of making Obligations a generic collection is that you can
> can add what you need. For describing "when" you could easily just include
> another attribute in the Obligations collection, and look for that before
> you take any action.
> 
> 
> seth
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: xacml-users-unsubscribe@lists.oasis-open.org
> For additional commands, e-mail: xacml-users-help@lists.oasis-open.org
> 
> 

-- 

*****************************************************************
David W. Chadwick, BSc PhD
Professor of Information Systems Security
The Computing Laboratory, University of Kent, Canterbury, CT2 7NF
Skype Name: davidwchadwick
Tel: +44 1227 82 3221
Fax +44 1227 762 811
Mobile: +44 77 96 44 7184
Email: D.W.Chadwick@kent.ac.uk
Home Page: http://www.cs.kent.ac.uk/people/staff/dwc8/index.html
Research Web site: http://www.cs.kent.ac.uk/research/groups/iss/index.html
Entrust key validation string: MLJ9-DU5T-HV8J
PGP Key ID is 0xBC238DE5

*****************************************************************