Re: [xacml] Re: "else" is what ? Was:Re: [xacml] Generalizing on-permit-apply-second

[Bill Parducci <bill@parducci.net>]

On May 23, 2013, at 6:05 PM, Steven Legg <steven.legg@viewds.com> wrote:

>> Ok. So to make sure that I am fully grasping this, the proposal is that this new mechanism only applies to PolicySets (not Policies)
> 
> Correct. The on-permit-apply-second combining algorithm is only defined as a
> policy combining algorithm.
> 
> and that these PolicySets will have a new requirement that Policy order is required to be maintained within them. Is this correct?
> 
> Yes, the order is significant (even in the current draft).

Thanks Steven. I believe this marks a bit of a shift in our approach as it the first situation where there is different processing logic between Policy and PolicySet and the requirement for order of Policy processing. 

b