ACL and Operational Policy

Hi,

 

I have seen the Access Control draft for KMIL V1.1.

 

The draft defines two categories of Permissions.

 

For a Role

                [1]
Role Permissions.

                [2]
Object Permissions.

Role Permissions define: Create, Register, Template Create,
and Template Register.

Object Permissions define: Admin, Operate, Derive,
get_attributes, get, get_wrapped and wrap.

 

These object permissions define the operations possible on
managed objects which operational policy also does.

 

How are the ACL Object Permission and Operational Policy different?

 

Please help me understand this concept. 

 

Thanks in advance…

 

 

 

Trinath Somanchi,