OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

xacml message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [xacml] Obligation and Advice handling in case of indeterminates

Hi Jan,

There are some discussions on this in the mailing list archives.

Basically, an Indeterminate means that an error has happened and the PDP cannot figure out what the decision should be. In light of that, it is a bit of a contradiction in terms that the PDP still would calculate what obligations goes with the decision.

I guess it might be possible to extend the model, but I think it would be entering into suspect territory to do so, with possible unintended consequences.

Best regards,

On 2012-08-10 12:38, Herrmann, Jan wrote:

Hi all,


Regarding Obligation and Advice handling in case of indeterminates the spec says the following:


“…As a consequence of this procedure, no obligations or advice SHALL be returned to the PEP if the rule, policies, or policy sets from which they are drawn are not evaluated, or if their evaluated result is "Indeterminate" or "NotApplicable", or if the decision resulting from evaluating the rule, policy, or policy set does not match the decision resulting from evaluating an enclosing policy set.”


I encountered differen use cases were this constraint led to several limitations. Why did we define this constraint. Is it explicitly required? What if obligations get dischared in an obligation handler called by the context handler and not by the pep. What I would need is the option return obligations even if some indeterminate occurs.


Thanks upfront for your thoughts on this issue.


Best regards




With best regards,
Jan Herrmann

Siemens AG
Corporate Technology
Corporate Research and Technologies
Otto-Hahn-Ring 6
81739 Munich, Germany
Tel.: +49 89 636-40612


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]