xacml — archive

[Polar Humenn <polar@syr.edu>]

 MHonArc v2.5.0b2 -->



















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: Re: [xacml] Summary of issues: WI#10. Parameters for CombiningAlgorithms




From: Polar Humenn <polar@syr.edu>
To: Seth Proctor <Seth.Proctor@Sun.COM>
Date: Thu, 1 Apr 2004 17:50:21 -0500 (EST)






On Thu, 1 Apr 2004, Polar Humenn wrote:

> > Using an expression defeats this (ie, if I use a designator, I'll never
> > know just by looking at the policy what parameters are being supplied).
> > Could someone provide a clear example that shows why we _need_
> > expressions instead of concrete values?
>
> Aside from you get it for free, so why not use it. You may want to
> reference a value you've defined else where.

For instance, you may want to calculate a value
based on attributes in the request context.

A bit contrived, let's say the way you combine the rules depends upon the
age difference between the potential bride and the groom. If the age
difference is below -10, you want to perform a deny overrides on the
rules, between -2 and 3, use a majority of Permits over Denies, and more
than 10, a permit overrides.

Cheers,
-Polar






Follow-Ups:

Re: [xacml] Summary of issues: WI#10. Parameters for CombiningAlgorithms
From: seth proctor <Seth.Proctor@Sun.COM>



References:

Summary of issues: WI#10. Parameters for Combining Algorithms
From: Anne Anderson <Anne.Anderson@Sun.COM>
Re: [xacml] Summary of issues: WI#10. Parameters for CombiningAlgorithms
From: Seth Proctor <Seth.Proctor@Sun.COM>
Re: [xacml] Summary of issues: WI#10. Parameters for CombiningAlgorithms
From: Polar Humenn <polar@syr.edu>






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]