Re: [xacml] BTG sequence diagram

[Bill Parducci <bill@parducci.net>]

On Apr 28, 2011, at 3:53 AM, David Chadwick wrote:

> Why does the XACML PDP return Indeterminate with a request for more attributes? Why not let the subject simply guess that this is what is needed, and let the subject try a bunch of additional attributes just in case he can get access with some of them?
> 
> I therefore suggest that returning a BTG response is entirely consistent with the current XACML model

Agreed. I would also offer (again) that from a pure implementation standpoint a single, atomic transaction is a better solution.

b