[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [xacml-dev] Some queries regarding RBAC and XACML Profile fordelegation.
Muhammad Masoom Alam wrote: >> The thing is that how we can combine these two policy sets i.e. RPS >> and PPS. can i use an 'dont-care' Delegate element in the PPS so that >> it shall match just to implement role hierarchy. >> > > Sorry, it is clearly written in Profile that if there is 'Dont-care' > Delegate element then result be 'Indeterminate'. > > But could you please give me some hint regarding, how i can implement > this heirarchy leaving ARBAC . There is no such thing as a "Don't care" delegate element. "Don't care" in the tables means that the content of the particular element does not matter in that specific evaluation case. /Erik