RE: [xacml-users] Newbie:Usage of XACML

["Kuketayev, Argyn \(Contractor\)" <argyn_kuketayev@fanniemae.com>]

> -----Original Message-----
> From: Stefan Brandl 
> [mailto:stefan.brandl@bibliothek.uni-regensburg.de] 
> Sent: Thursday, May 12, 2005 5:35 AM
> To: xacml-users@lists.oasis-open.org
> Subject: [xacml-users] Newbie:Usage of XACML

> I've seen that XACML replies only "PERMIT, "DENY" ...
> Is there a way to express rights within the Response like
> "is able to edit admin information" or "can delete user 
> information".

"is able to edit admin information" can be a rule like:

Subject: "external user"
Resource: "admin information"
Action: "Edit"
Effect: "Permit" 

argyn