Re: [xacml-users] Patterns and best practices for securing accessto attributes of resources

[Farrukh Najmi <farrukh@wellfleetsoftware.com>]

On 08/05/2010 07:09 AM, Ludwig Seitz wrote:
> On Tue, 2010-08-03 at 11:48 -0400, Farrukh Najmi wrote:
>    
>> Hello,
>>      
> ...
>    
>> It is clear in to me (and in the regrep 4 specs) how XACML 2.0 can be
>> use to secure access to RegistryObjects at the entire object level.
>> It is not clear to me how the regrep 4 specs could define performing
>> access to specific sub-elements and attributes of RegistryObjects.
>> This is where I am requesting your guidance on suggested patterns or
>> best practices.
>>
>>      
> I believe you might find what you seek in the Hierarchical resource
> profile of XACML v2.0. Basically you need a hierarchical representation
> of you RegistryObjects and their sub-elements.
>
> /Ludwig
>
>    

Quick read suggests this the Hierarchical resource profile of XACML v2.0 
is designed to address the precise problem I am trying to solve :-)
Thank you.

-- 
Regards,
Farrukh

Web: http://www.wellfleetsoftware.com