support of <PolicySet> elements under PPS elements?

["Jan Herrmann" <herrmanj@in.tum.de>]

Hi there,

the XACML v3.0 RBAC profile states:

 

“...Permission <PolicySet> or PPS: a <PolicySet> that contains the actual permissions

141 associated with a given role. It contains <Policy> elements and <Rules> that describe the

142 resources and actions that subjects are permitted to access, along with any further conditions on

143 that access, such as time of day. ...”

 

From my point of view this PPS definition is unnecessary limiting the structure below PPS. I would propose to support <PolicySet> elements under PPS elements, unless there are good reasons why this should be prohibited.

 

Best regards

Jan

 

 

--

Jan Herrmann

Dipl.-Inform., Dipl.-Geogr.

Scientific Assistant

Chair for Applied Informatics / Cooperative Systems

Technische Universität München

Boltzmannstr. 3

85748 Garching

Germany

T: +49 89 289 18692

F: +49 89 289 18657

W: www11.in.tum.de