[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [xacml] Generalizing on-permit-apply-second
Yes, that is true. That is what I wrote in my initial email, so yes, it's syntactic sugar.
But there is value in it because it simplifies tooling implementation. It's an implementation overhead to have to do the refactoring when outputting policies or to have to scan for these redundancies when round tripping back a policy into the PAP in order to hide them from the user.
And it also simplifies the PDP implementation from a performance point of view since we avoid the redundant expressions at run time. Sure, the PDP could scan for redundancy like this, but then, that's another thing we can avoid having to implement.
On 2013-05-22 13:07, Allan Foster wrote: