OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

xacml message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: New Issue: propose carrying extended Indeterminate to Response forPEP processing


To TC:

Briefly, as described in XACML analysis in ref cited in Implementor's guide:
http://www.oasis-open.org/committees/document.php?document_id=42300
http://lists.oasis-open.org/archives/xacml/201105/msg00090.html

the same issues that drove us to create extended Indeterminate to carry 
D or P
to the Policy/PolicySet level, apply to the notion of Deny-biased and 
Permit-biased
PEPs. See sections 7.2.2 Deny-biased PEP and 7.2.3 Permit-biased PEP in WD20
(and earlier 3.0 versions as well)

By simply allowing the D or P to be sent along with the Ind in the 
Response, then
3.0 should completely address the issues raised in section 2 of the 
above cited ref.

     Thanks,
     Rich




[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]