[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]
Subject: Re: [xacml] Polar's resolution of PM-2-05
I believe for a PDP evaluation of policy we have sort of 5 values, Permit, Deny, Indeterminate, Inapplicable, and the obligatory Error. However, to keep things simple, We can have the important ones. Permit with obligations: Grant permission and carry out obligations Deny with obligations: Deny permission and carry out obliigations Indeterminate with reasons: Cannot make a determination: Inapplicable - Policy evaluated by the PDP doesn't apply. Insufficent Information - More information needed. Error - There is a problem with request, or the policy (debugging?) Silence - No reason is given. We should probably propose text for this stuff. Cheers, -Polar On Fri, 5 Apr 2002, Anne Anderson - Sun Microsystems wrote: > Isn't there another value that can be returned: INAPPLICABLE? > > Isn't this what is returned if no target or target/condition in the > policy[Combination]Statements and <rule>s used by the PDP evaluate > to TRUE? > > Anne Anderson > > > ---------------------------------------------------------------- > To subscribe or unsubscribe from this elist use the subscription > manager: <http://lists.oasis-open.org/ob/adm.pl> >
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]
Powered by eList eXpress LLC