OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

xacml message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [xacml] Re: "else" is what ? Was:Re: [xacml] Generalizing on-permit-apply-second

I stand corrected.

My reticence to having an if/then construct remains, but I seem alone in this position so I will refrain from pursuing further. 


On May 24, 2013, at 9:41 AM, Danny Thorpe <Danny.Thorpe@software.dell.com> wrote:

> Order of policy processing is already imposed by the existing Ordered-Deny-Overrides, Ordered-Permit-Overrides, and First-Applicable policy combining algorithms.
> -Danny
> Danny Thorpe 
> Authorization Architect 
> Dell | Identity & Access Management
> Quest Software is now part of Dell.
>> -----Original Message-----
>> From: xacml@lists.oasis-open.org [mailto:xacml@lists.oasis-open.org] On
>> Behalf Of Bill Parducci
>> Sent: Thursday, May 23, 2013 10:30 PM
>> To: Steven Legg
>> Cc: Erik Rissanen; xacml@lists.oasis-open.org
>> Subject: Re: [xacml] Re: "else" is what ? Was:Re: [xacml] Generalizing on-
>> permit-apply-second
>> On May 23, 2013, at 6:05 PM, Steven Legg <steven.legg@viewds.com>
>> wrote:
>>>> Ok. So to make sure that I am fully grasping this, the proposal is
>>>> that this new mechanism only applies to PolicySets (not Policies)
>>> Correct. The on-permit-apply-second combining algorithm is only
>>> defined as a policy combining algorithm.
>>> and that these PolicySets will have a new requirement that Policy order is
>> required to be maintained within them. Is this correct?
>>> Yes, the order is significant (even in the current draft).
>> Thanks Steven. I believe this marks a bit of a shift in our approach as it the
>> first situation where there is different processing logic between Policy and
>> PolicySet and the requirement for order of Policy processing.
>> b
>> ---------------------------------------------------------------------
>> To unsubscribe from this mail list, you must leave the OASIS TC that
>> generates this mail.  Follow this link to all your TCs in OASIS at:
>> https://www.oasis-
>> open.org/apps/org/workgroup/portal/my_workgroups.php

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]