Re: [xacml] Standardized PRP request format?

[Polar Humenn <polar@syr.edu>]

On Mon, 3 Jun 2002, Gerald Brose wrote:

> Hi,
>
> I was wondering whether the policy request interface between
> the PDP and the PDP would not benefit from a standardized
> interface.
> Looking at the data flow model on p. 15 of the v13
> draft, I noticed that the return value from the PRP has a
> standard format (viz. XACML policyStatement) but the request
> hasn't.

Well, actually, that is a component of the response, there might be other
things, such as it being wrapped in an assertion?

> I would have thought that interoperability using this interface
> would probably be one of the main selling points of XACML
> for PEP/PDP vendors ("mechanism vendors") and PRP/PAP
> vendors ("policy tool vendors").

It would be. Basically, the CORBA Resource Access Decision service really
provides standard interfaces for PAP, PRP, and PDP.  We are just embarking
on duplicating this work in the current XML and SOAP popularity (i.e.
reinventing the wheel, so Microsoft might play, which is a noteable
force).

I figure that protocols for transport XACML and its adimistration and
evaluation is something that Hal wanted to start on after we finish the
policy specification.

Cheers,
-Polar



> I had a brief discussion about this issue with Don and
> Konstantin the other day but would like to collect more
> opinions from the list (now that I finally can post to it :-)
> Thanks, Carlisle, for sorting out the mailing-list problems)
>
> Best regards, Gerald.
> --
> Dr. Gerald Brose, Software Architect    mailto:brose@xtradyne.com
> Xtradyne Technologies                     http://www.xtradyne.com
> Schoenhauser Allee 6-7,                  Phone: +49-30-440 306-27
> D-10119 Berlin, Germany                  Fax  : +49-30-440 306-78
>
> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>
>