OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

xacml-dev message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [xacml-dev] more efficient way for multible requests

On Thu, 2004-11-18 at 11:27, Jan bei GMX wrote:
> following the profile for multiple resources one has to put the
> resource (in my case an xml file) in the resourceContent. Than you
> should use the scope Attribute of descendants to get access control
> over the entire doc. Therefor one has to extend the resourceFinder
> Module. This works fine and the context handler is submitting all the
> individual requests to the pdp. The pdp than evaluates each one and
> gives back a result (one for each node in the xml doc).  Unfortunately
> in my use case it would be much better if the context handler generates
> one individual request after the other. after sending one request and
> getting back the corresponding response he could decide whether he
> should continue gererating individual requests for this subtree. If the
> responce to the root node of a subtree is deny then he could stop going
> down this subtree and continue with the brother( if there is one). Is
> their a way to get such a behavior without having to make big changes

This is really an implementation detail, as you note. Please re-send the
question to the sunxacml-discuss@lists.sourceforge.net list. The short
answer is that no, it won't be hard to do this, but it will require you
to re-implement a little code.


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]