Re: [xacml] New Topic: Policy Provisioning

[Prateek Mishra <prateek.mishra@oracle.com>]

Hal,

Your proposed approach is of interest to us.

I will obtain additional feedback on this issue and post the use-cases 
of interest to us.

- prateek


> I have taken a further look at SPML and suggest the following might be a
> reasonable approach. Base the implementation on the SPML v2 - XSD
> Profile. Use Policy ID as the PSO Identifier. Using SPML defined
> operations the PAP can inquire of a PDP what policies it currently has.
> Using SPML the PAP can add, modify and delete policies as required.
> Using the SPML Batch capability, the PAP can insure that a set of
> updates is applied as a unit, thus avoiding the problem of the PDP
> making decisions on some inconsistent, interim set of policies. SPML
> also provides other potentially useful features such as error codes,
> asynchronous operations and capability queries.
>
> The main thing that this proposal requires is people who are willing to
> contribute to the work and edit the document.
>
> Hal 
>
>