Re: [xacml] Draft XACML FAQ, Take 2

[Anne Anderson <Anne.Anderson@Sun.com>]

I added:

  Adoption of XACML across vendor and product platform should
  provide the opportunity for organizations to perform access and
  access policy audits directly across such system.

OK?

Anne

On 20 August, bill parducci writes: Re: [xacml] Draft XACML FAQ, Take 2
 > From: bill parducci <bill.parducci@overxeer.com>
 > To: XACML TC <xacml@lists.oasis-open.org>
 > Subject: Re: [xacml] Draft XACML FAQ, Take 2
 > Date: Wed, 20 Aug 2003 13:37:00 -0700
 > 
 > nicely done.
 > 
 > i would like to propose an addition to the following:
 > 
 > >    2.
 > > 
 > >       *What is the need for such a standard?*
 > > 
 > >       Currently, there are many proprietary or application-specific
 > >       access control policy languages. This means policies can not be
 > >       shared across different applications, and provides little
 > >       incentive to develop good policy composition tools. Many of the
 > >       existing languages do not support distributed policies, are not
 > >       extensible, or are not expressive enough to meet new requirements.
 > >       XACML enables use of arbitrary attributes in policies, role based
 > >       access control, security labels, time/date-based policies,
 > >       indexable policies, "deny" policies, and dynamic policies, all
 > >       without requiring changes to the applications that use XACML.
 > 
 > append: Adoption of XACML across vendor and product platform should 
 > provide the opportunity for organizations to perform security [policy] 
 > audits directly across such system.
 > 
 > or something to that affect. i am a big proponent of 'holistic' security 
 >   policy management and that is almost impossible today. it is my hope 
 > that XACML will eventually allow tools to be developed that allow 
 > clients to map/evaluate corporate policy to technology implementations.
 > 
 > i also like hal's suggestion that we include the xrml reference.
 > 
 > b
 > 
 > 
 > You may leave a Technical Committee at any time by visiting http://www.oasis-open.org/apps/org/workgroup/xacml/members/leave_workgroup.php
 > 

-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692