[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: policy combine algorithm
Hi,
If the effects of all rules of all policies are defined as "permit", does setting rules' or policies' combine algorithm to deny-overrides make any sense? I think this setting does not make any sense since "deny" of a rule value or a policy-value will never occur. Is this correct statement?
thanks!
hao
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]