RE: [xacml] REST Profile wd04

[<remon.sinnema@emc.com>]

Craig,


From: Craig R Forster [mailto:cforster@us.ibm.com] 
Sent: Wednesday, May 23, 2012 4:21 PM
To: Sinnema, Remon
Cc: xacml@lists.oasis-open.org
Subject: RE: [xacml] REST Profile wd04

> To me, it seems like this API is not exposing PAP functionality but Policy Repository functionality

The core spec mentions the concept of a policy repository, but provides little detail -- I think on purpose. From what's in the core spec, it's hard to distinguish between a PAP and a policy repository. I guess it boils down to what one thinks "administration" means. I limited this to CRUD in the REST profile, since that seems to be the only functionality one can know for sure will be provided by all PAPs/policy repositories. As is evident from section 1.5.2.,  I don't consider a policy editor to be a PAP per se. Maybe we need to define these terms better?


Thanks,
Ray