Re: [xacml] Current Formalism

[bill parducci <bill@parducci.net>]

correct, however, this must be done in describable fashion so that the 
overall result is deterministic. to me that means that the 
default/base/widget/magic policy must be a component of the XACML scope. 
(that way anne can have true+n/a=permit and i can have true+n/a=deny 
evaluate within the same expressive framework :o)

b

Polar Humenn wrote:

> An ApplicablePolicy evaluates to True, False, or Inapplicable.
> 
> It is the job of the PDP to map these values to Permit, Deny, or
> Indeterminate, which is an adminstrative policy of the PDP.
> 
> The most likely would be,
> 
> Policy         Result
> ------         ------
> True           Permit
> False          Deny
> Inapplicable   Indeterminate, or a "default" of Permit, Deny
> 
> -Polar
> 
>