[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]
Subject: Re: [xacml] Current Formalism
correct, however, this must be done in describable fashion so that the overall result is deterministic. to me that means that the default/base/widget/magic policy must be a component of the XACML scope. (that way anne can have true+n/a=permit and i can have true+n/a=deny evaluate within the same expressive framework :o) b Polar Humenn wrote: > An ApplicablePolicy evaluates to True, False, or Inapplicable. > > It is the job of the PDP to map these values to Permit, Deny, or > Indeterminate, which is an adminstrative policy of the PDP. > > The most likely would be, > > Policy Result > ------ ------ > True Permit > False Deny > Inapplicable Indeterminate, or a "default" of Permit, Deny > > -Polar > >
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]
Powered by eList eXpress LLC