xacml — archive

Re: [xacml] obligations & error conditions

From: Bill Parducci <[email protected]>
To: [email protected]
Date: Tue, 13 Apr 2004 21:44:00 -0000

 MHonArc v2.5.0b2 -->




















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: Re: [xacml] obligations & error conditions




From: Bill Parducci <[email protected]>
To: xacml <[email protected]>
Date: Tue, 13 Apr 2004 15:00:56 -0700






Polar Humenn wrote:

> The Result is Deny. And as currently written (I didn't change the Deny
> part), the spec says it must make a "best-effort" in discharging the
> obligation. It's not an error. Access is denied, no call is made.

then i missed an edit last night somewhere because my intent was to define 
incompressibility of decision as Error. ('skewless')

> Mary's dead, you heartless scowl. :)

i may be a heartless scowl, but i am a deterministically minded heartless scowl ;o)

> Seriously, if we change skew to be equal on Deny as with Permit, I'd happy
> with it.

i will take another shot at this tonight.

b








References:

obligations & error conditions
From: Bill Parducci <[email protected]>
Re: [xacml] obligations & error conditions
From: Polar Humenn <[email protected]>
Re: [xacml] obligations & error conditions
From: Bill Parducci <[email protected]>
Re: [xacml] obligations & error conditions
From: Polar Humenn <[email protected]>






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]