Re: [xacml-users] Patterns and best practices for securing accessto attributes of resources

[Ludwig Seitz <ludwig@axiomatics.com>]

On Tue, 2010-08-03 at 11:48 -0400, Farrukh Najmi wrote:
> Hello,
...
> It is clear in to me (and in the regrep 4 specs) how XACML 2.0 can be 
> use to secure access to RegistryObjects at the entire object level.
> It is not clear to me how the regrep 4 specs could define performing 
> access to specific sub-elements and attributes of RegistryObjects.
> This is where I am requesting your guidance on suggested patterns or 
> best practices.
> 

I believe you might find what you seek in the Hierarchical resource
profile of XACML v2.0. Basically you need a hierarchical representation
of you RegistryObjects and their sub-elements.

/Ludwig

-- 
Ludwig Seitz, PhD             |   Axiomatics AB
Training & Development        |   Skeppsbron 40
Phone: +46 (0)760 44 22 91    |   SE-111 30 Stockholm
Mail: ludwig@axiomatics.com   |   Sweden

This is a digitally signed message part