[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]
Subject: Re: [xacml] Distributed Access Control
Opps, I'm sorry, I got the number wrong. (I hate these numbers). http://www.omg.org/cgi-bin/doc?formal/2001-04-01 Should get you there. -Polar On Mon, 4 Feb 2002, ernesto damiani wrote: > Unfortunately I could not get the document. > Here is what the OMG server says: > > No document found matching document number formal/01-04-11.pdf. > Searched document directories for formal/2001-04-11. > anyone had better luck? > ernesto > ----- Original Message ----- > From: "Polar Humenn" <polar@syr.edu> > To: <xacml@lists.oasis-open.org> > Sent: Tuesday, December 18, 2001 1:36 AM > Subject: [xacml] Distributed Access Control > > > > > > Greetings, > > > > In response to some query about the expressiveness of evaluation of > > policies from different places, I would like to point the group to the > > CORBA Resource Access Decision specification (RAD). > > > > http://www.omg.org/cgi-bin/doc?formal/01-04-11.pdf > > > > and we may want to include it the document repository. > > > > It has in it an Access Decision model in which not only policies are > > located, but also, a policy evaluation combinator is located for a > > particular resource. > > > > Note, there is no language component to this specification. > > > > However, it does present a model by which policy can be distributed and > > evaluated. A combinator, which has an interface operation of > > "evaluate_policies" takes the list of located policies for the resource, > > the attribute list of the subject, and the operation (i.e. Action) on the > > resource) and evaluates the decision. > > > > That way, depending the semantics of the combinator you choose for the > > resource, your combinator may choose to ignore, or evaluate only some > > policies based on the evaluations of other policies. > > > > Cheers, > > -Polar > > > > > > > > > > > > ---------------------------------------------------------------- > > To subscribe or unsubscribe from this elist use the subscription > > manager: <http://lists.oasis-open.org/ob/adm.pl> > > > ---------------------------------------------------------------- > To subscribe or unsubscribe from this elist use the subscription > manager: <http://lists.oasis-open.org/ob/adm.pl> >
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]
Powered by eList eXpress LLC