xacml — archive

Re: [xacml] [CR] Subsections in Section 7

From: Anne Anderson <[email protected]>
To: [email protected]
Date: Wed, 09 Oct 2002 17:04:00 -0000

On 9 October, Michiharu Kudoh writes: [xacml] [CR] Subsections in Section 7 > I think the order of subsections in Section 7 (Functional Requirements > (normative)) should be changed. Section 7.6 Policy Set evaluation and > Section 7.5 Policy evaluation should be followed by missing attributes > (Section 7.1) and LDAP attributes (Section 7.3) in terms of importance. > More appropriate order would be: > > 7.1 Policy Set evaluation > 7.2 Policy evaluation > 7.3 Rule evaluation I suggest putting missing attributes, then LDAP attributes, then hierarchical resources after "Rule evaluation". These all come up during Rule evaluation. Obligations applies at the Policy evaluation level, but only comes up after rules have been evaluated, so I think it belongs at the end. Anne -- Anne H. Anderson Email: [email protected] Sun Microsystems Laboratories 1 Network Drive,UBUR02-311 Tel: 781/442-0928 Burlington, MA 01803-0902 USA Fax: 781/442-1692