Subject: RE: [xacml-users] Access time constraints implementation
> -----Original Message----- > From: Seth.Proctor@Sun.COM [mailto:Seth.Proctor@Sun.COM] > Sent: Wednesday, April 13, 2005 12:01 AM > To: Kuketayev, Argyn (Contractor) > Cc: email@example.com > Subject: Re: [xacml-users] Access time constraints implementation > > > I don't know how your whole system works, but your approach seems > reasonable to me. Basically, it sounds like you want to isolate the > time-based rules so it's easier to understand how they effect > the rest > of the system, and I think that's what you've done. > > > seth > > Exactly. I'd like to keep time restriction policies separate from the other policies. I did a prototype and it seems working fine. However, I'm not sure if it's the best solution in terms of performance.