OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

soa-rm-ra message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: RE: [soa-rm-ra] Groups - Authorization.png uploaded


The policy rules are within the context of authorization. Since the
model is conceptual, the rules could be implemented with the role,
associated with an authorization policy used by an enforcement point,
etc.  It would make the diagram more confusing to explain what may be
more of an implementation preference.

Danny

-----Original Message-----
From: Mike Poulin [mailto:mpoulin@usa.com] 
Sent: Wednesday, September 30, 2009 1:12 PM
To: Thornton, Danny R (IS); soa-rm-ra@lists.oasis-open.org
Subject: Re: [soa-rm-ra] Groups - Authorization.png uploaded

I would like to add one element to the digram next to the 'Role' box -
the 'Rule' box

When I designed an Entitlement System for JP Morgan's Credit Risk
Management, we could not address all needed authorisation combinations
via Roles only (RBAC has limits). The solutions was in Rules.
Combination of Roles and Rules can cover all cases of Authorisation.
Rules sound like Policies but authorisation rules are not the same thing
as Business Policies that lead to defining certain access rules.

- Michael



> ----- Original Message -----
> From: Danny.Thornton@ngc.com
> To: soa-rm-ra@lists.oasis-open.org
> Subject: [soa-rm-ra] Groups - Authorization.png uploaded
> Date: 30 Sep 2009 16:09:45 -0000
> 
> The document named Authorization.png has been submitted by Danny 
> Thornton to the SOA-RM Reference Architecture SC document repository.
> 
> Document Description:
> Update to Figure 55, Authorization
> 
> View Document Details:
> http://www.oasis-open.org/committees/document.php?document_id=34459
> 
> Download Document:
> http://www.oasis-open.org/committees/download.php/34459/Authorization.
> png
> 
> 
> PLEASE NOTE:  If the above links do not work for you, your email 
> application may be breaking the link into two pieces.  You may be able

> to copy and paste the entire link address into the address field of
your web browser.
> 
> -OASIS Open Administration

>


--
An Excellent Credit Score is 750
See Yours in Just 2 Easy Steps!



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]