RE: [xacml] REST Profile - PAP Issues

[<remon.sinnema@emc.com>]

Hal,


> -----Original Message-----
> From: Hal Lockhart [mailto:hal.lockhart@oracle.com]
> Sent: Thursday, May 31, 2012 4:52 PM
> To: Danny Thorpe; Sinnema, Remon
> Cc: xacml@lists.oasis-open.org
> Subject: RE: [xacml] REST Profile - PAP Issues
> 
> Currently the PAP concept is pretty vague. I think we need to break it
> up into subcomponents and define their relationships. This will give us
> the ability to decide what aspects should be standardized, what
> properties the components are required to implement and where the
> opportunities for unstandardized value add are.

I agree. We've already identified a couple of subcomponents: policy distribution and (server side?) versioning semantics.

I maintain, however, that no meaningful policy administration is possible without CRUD operations on policies. Since policy CRUD will always be necessary and is pretty straightforward, I don't think we have to postpone the policy administration part of the REST profile.

Once we have identified more subcomponents, we can add those to later versions of the REST profile.


Thanks,
Ray