xacml message

Subject: XACML REST profile -- mandatory vs optional

From: Craig R Forster <cforster@us.ibm.com>
To: xacml@lists.oasis-open.org
Date: Tue, 22 May 2012 10:58:41 -0500

Hi all,

Given the current mandatory vs optional part of the XACML REST profile draft:

Identifier
M/O

urn:oasis:names:tc:xacml:3.0:profile:rest:service
M

urn:oasis:names:tc:xacml:3.0:profile:rest:pdp
M

urn:oasis:names:tc:xacml:3.0:profile:rest:pap
O

It seems like there is no provision for a pure policy management endpoint; that is one that exposes the PAP profile but has no available PDP. Is this by design?

Regards,
Craig

-------
craig forster | technical lead, tivoli security policy manager
cforster@us.ibm.com
-------

Follow-Ups:
- RE: [xacml] XACML REST profile -- mandatory vs optional
  - From: <remon.sinnema@emc.com>

Identifier	M/O
urn:oasis:names:tc:xacml:3.0:profile:rest:service	M
urn:oasis:names:tc:xacml:3.0:profile:rest:pdp	M
urn:oasis:names:tc:xacml:3.0:profile:rest:pap	O