RE: [xacml-users] XACML Profile for RBAC

["Kuketayev, Argyn \(Contractor\)" <argyn_kuketayev@fanniemae.com>]

Muhammad

> -----Original Message-----
> From: Muhammad Masoom Alam [mailto:Muhammad.alam@uibk.ac.at] 
> Sent: Thursday, June 09, 2005 10:08 AM
> To: xacml-users@lists.oasis-open.org
> Cc: Anne.Anderson@sun.com; Seth Proctor; argyn
> Subject: [xacml-users] XACML Profile for RBAC
> 
> 
[skip]
> 
> <PolicySet PolicySetId="RPS:managerRole" Combining Algorithm = 
> "deny-overrides">
>             <PolicySet Combining Algorithm = "permit-overrides">
>                     
> <PolicySetIdReference>PPPS:managerRole</PolicySetIdReference>
>                   
> <PolicySetIdReference>DenyPolicy</PolicySetIdReference> 
> <!-- Think of it , that it is not present , we can remove it 
> no problem at 
> all-->
>             </PolicySet>
>            <Target>
>                 Role Definition
>             </Target>
>                     
> <PolicySetIdReference>NPPS:managerRole</PolicySetIdReference> 
> <!-- This is a Negative Permission Policy reference we can 
> also remove it no 
> problem at all-->
>  </PolicySet>

You are doing this again :) You have more than one policy reference from
RPS.

argyn