RE: [xacml-users] XACML Samples

["Kuketayev, Argyn" <argyn_kuketayev@fanniemae.com>]

> -----Original Message-----
> From: Seth Proctor [mailto:Seth.Proctor@Sun.COM] 
> Sent: Tuesday, October 12, 2004 6:53 PM
> To: Kuketayev, Argyn
> Cc: xacml-users@lists.oasis-open.org
> Subject: RE: [xacml-users] XACML Samples
> 
> 
> 
> On Tue, 2004-10-12 at 16:09, Kuketayev, Argyn wrote:
> > I'm addressing this problem with "unit tests". I write lots 
> of tests 
> > to check that rights are granted properly.
> >
> > [...]
> > 
> > Whenever there's any change in policies, all these tests must be 
> > executed successfully. I don't there's a better way to achieve your 
> > objectives.
> 
> This is definately the most straightforward way to tackle the 
> problem, but it has two problems. One is that it's a pain to 
> write and maintain all those test policies, and there's no 
> guarentee you wrote those cases correctly (without in turn 
> testing them). The second is that you can't be sure if your 
> test cases actually cover all the corners.
> 

Yeah, these are the same well-known problems, which exist with any unit
testing process :)

It's a pain to write tests if you do them all at once. However, if you
add them at the same time when you code or change policies, it's not
that bad. Writing a couple of tests a day doesn't hurt much.

Thanks,
Argyn