Re: [xacml] Polar's resolution of PM-2-05

[Polar Humenn <polar@syr.edu>]

I believe for a PDP evaluation of policy we have sort of 5 values,
Permit, Deny, Indeterminate, Inapplicable, and the obligatory Error.

However, to keep things simple, We can have the important ones.

Permit with obligations: Grant permission and carry out obligations
Deny with obligations: Deny permission and carry out obliigations

Indeterminate with reasons: Cannot make a determination:
   Inapplicable - Policy evaluated by the PDP doesn't apply.
   Insufficent Information - More information needed.
   Error - There is a problem with request, or the policy (debugging?)
   Silence - No reason is given.

We should probably propose text for this stuff.

Cheers,
-Polar


On Fri, 5 Apr 2002, Anne Anderson - Sun Microsystems wrote:

> Isn't there another value that can be returned: INAPPLICABLE?
>
> Isn't this what is returned if no target or target/condition in the
> policy[Combination]Statements and <rule>s used by the PDP evaluate
> to TRUE?
>
> Anne Anderson
>
>
> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>
>