OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

xacml-users message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [xacml-users] Patterns and best practices for securing accessto attributes of resources

On Tue, 2010-08-03 at 11:48 -0400, Farrukh Najmi wrote:
> Hello,
> It is clear in to me (and in the regrep 4 specs) how XACML 2.0 can be 
> use to secure access to RegistryObjects at the entire object level.
> It is not clear to me how the regrep 4 specs could define performing 
> access to specific sub-elements and attributes of RegistryObjects.
> This is where I am requesting your guidance on suggested patterns or 
> best practices.

I believe you might find what you seek in the Hierarchical resource
profile of XACML v2.0. Basically you need a hierarchical representation
of you RegistryObjects and their sub-elements.


Ludwig Seitz, PhD             |   Axiomatics AB
Training & Development        |   Skeppsbron 40
Phone: +46 (0)760 44 22 91    |   SE-111 30 Stockholm
Mail: ludwig@axiomatics.com   |   Sweden

This is a digitally signed message part

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]