security-use message

Subject: RE: BALLOT: Issue Group 11: Authorization Use Case

From: "Mishra, Prateek" <pmishra@netegrity.com>
To: "'security-use@lists.oasis-open.org'" <security-use@lists.oasis-open.org>
Date: Wed, 28 Mar 2001 12:21:12 -0500


>>Issue Group 11:
>>
>>ISSUE:[UC-11-01:AuthzUseCase] Use Case 2 in Strawman 3
>>(http://www.oasis-open.org/committees/security/docs/draft-sstc
>>-use-strawman-
>>03.html) describes the use of SAML for the conversation 
>>between a Policy
>>Enforcement Point (PEP) and a Policy Decision Point (PDP), in 
>>which the PEP
>>sends a request describing a particular action (such as 'A 
>>client presenting
>>the attached SAML data wishes to read 
>>http://foo.bar/index.html'), and the
>>PDP replies with an Authorization Decision Assertion 
>>instructing the PEP to
>>allow or deny that request.
>>
>>
>>------------------------------------------------------------
>>
>>Ballot:
>>
>>ISSUE:[UC-11-01:AuthzUseCase]
>>
>>1. Continue to include this use case.

I vote for 1.

>>2. Remove this use case.
>