OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

security-services message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


Subject: Re: Resource sets and resource string semantics


>>>>> "AP" == Anthony Palmer <tony@vordel.com> writes:

    AP> Hi all, I think that this discussion is trying to address
    AP> multiple issues with one solution, which may be
    AP> problematic. Are there not two or mabye three questions being
    AP> asked here?

    AP> Question one:
    AP> PEP:Can Alice access http://www.hp.com/documents/foo.txt?  
    AP> PDP: Yes, ReadOnly
    AP> Assumes Alice knows that /documents/foo.txt exists.

Actually, I believe the question, as stateable in SAML right now, is:

    PEP: Can Alice Read http://www.hp.com/documents/foo.txt?  
    PDP: Yes

    PEP: Can Alice Execute http://www.hp.com/documents/foo.txt?  
    PDP: No

~ESP

-- 
Evan Prodromou <evan@outlook.net>
Applications Lead
Outlook Technologies, Inc.


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


Powered by eList eXpress LLC