Re: [xacml-users] Is the authorization policy and access controlpolicy same in XACML

[Anne Anderson <Anne.Anderson@sun.com>]

Jarry,

"Access control" is the purpose or result of a policy.  "Authorization" 
is the permission needed to gain access, and, in a system such as XACML, 
this permission is described in a policy.  So the terms tend to be used 
somewhat interchangeably.

Anne

grassland wrote:

> hi, all,
>  Recently, I am confused by some concepts in XACML.
> who can tell me their differences? the authorization policy and access
> control policy.
> However, I see some one oftern uses the two term alternately.
> who can give me some examples coded with XACML to distinguish them.
> 
> 
> 
> thanks.
> 
> 
> jarry
> 

-- 
Anne H. Anderson               Anne.Anderson@sun.com
Sun Microsystems Labs          1-781-442-0928
Burlington, MA USA