[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [xacml-comment] About PolicySet evaluation
The result of policyset 2 (issued by Bob) needs to be reduced within policyset 1. An administrative request is generated based on the access request evaluated in policyset 1 and with Bob as a delegate. That administrative request is evaluated against policyset 3. Regards, Erik xiaofeng03 wrote: > Dear XACML CommitteeŁ¬ > > There is a policy set forest. > policyset1 > / \ > / \ > policyset2 policyset3 > / \ \ > / \ ....... > policy_a policy_b > > policyset2 is issured by Bob. policy_a and policy_b are issured by trustee. > > Given a access request A, policyset2,policy_a and policy_b match A. We evaluate policyset2 and get result, > for example (Bob,permit). Bob isn't trustee. We need use policyset2 result to calculate policyset1 result. Now, do we need to construct > an administrative request according to policyset1,policyset1 result and access request A ? > > Best Regards > > ----------------------------------------------------------------------- > Li XiaoFeng > Email:xiaofeng03 (at) iscas (dot) cn > lxf (at) is (dot) iscas (dot) ac (dot) cn > Department:LOIS,Institute of Software Chinese Academy of Sciences > Address:4# South Fourth Street, Zhong Guan Cun, Beijing,P.R. CHINA > ----------------------------------------------------------------------- > 2006-08-10 > > > >
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]