Re: [xacml] Reviewed os 1.0 Draft 3

[Michiharu Kudoh <KUDO@jp.ibm.com>]

Anne,

Thank you for taking time to Satoshi's question. I also agree with you.

For the conformance test cases, I think we can create a set of test cases
even for the standard POLICY combining algorithms. It covers the cases
where a set of obligations are deterministically resolved. Although it does
not cover all the cases of the every combination of rule, policy, and
policy set, it would be useful for readers how obligations are combined
over policy hierarchies. I think we can provide a set of test cases for
obligations.

Michiharu



                                                                                                                                       
                      Anne Anderson                                                                                                    
                      <Anne.Anderson@Su        To:       Satoshi Hada/Japan/IBM@IBMJP                                                  
                      n.com>                   cc:       XACML TC <xacml@lists.oasis-open.org>                                         
                                               Subject:  Re: [xacml] Reviewed os 1.0 Draft 3                                           
                      2003/02/12 23:55                                                                                                 
                      Please respond to                                                                                                
                      Anne.Anderson                                                                                                    
                                                                                                                                       
                                                                                                                                       



On 12 February, Satoshi Hada writes: Re: [xacml] Reviewed os 1.0 Draft 3
 > This makes sense to me.
 >
 > >>  If a user of XACML wants to return a consistent set of
 > >>   Obligations, then the user must define a new combining
 > >>   algorithm that specifies the order of evaluation or requires
 > >>   that all components of the policy must be fully evaluated.
 >
 > So should I conclude that it's difficult to create conformance test
cases
 > for testing obligations in case of the standard POLICY combining
 > algorithms?
 > (I know it's possible to create them in case of the standard RULE
combining
 > algorithms.)

Yes, I think it would be difficult.  Anyone else thought about this?

Anne
--
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692


----------------------------------------------------------------
To subscribe or unsubscribe from this elist use the subscription
manager: <http://lists.oasis-open.org/ob/adm.pl>