RE: [xacml] Hierarchical actions

[<remon.sinnema@emc.com>]

Erik,


> -----Original Message-----
> From: xacml@lists.oasis-open.org [mailto:xacml@lists.oasis-open.org] On
> Behalf Of Erik Rissanen
> Sent: Wednesday, October 26, 2011 6:05 PM
> To: xacml@lists.oasis-open.org
> Subject: Re: [xacml] Hierarchical actions
> 
> Do you really need a full hierarchy? That is, several levels of depth.

Yes, see my original use case. Delete implies Write implies ...


> If so, doings something similar to the hierarchical resource profile
> ancestor attributes would be a way to go: "action-ancestor-or-self",
> etc. I guess it could be standardized too.

Yes, so I could build a Documentum-specific PIP that retrieves the values for this attribute.


Thanks,
Ray