4 messages in org.oasis-open.lists.xacmlRE: [xacml-comment] Public Comment| From | Sent On | Attachments |
|---|---|---|
| Hal Lockhart | Dec 21, 2005 7:32 am | |
| Bill Parducci | Dec 21, 2005 7:49 am | |
| Polar Humenn | Dec 21, 2005 8:02 am | |
| Bill Parducci | Dec 21, 2005 8:48 am |
| Subject: | RE: [xacml-comment] Public Comment | |
|---|---|---|
| From: | Hal Lockhart (hloc...@bea.com) | |
| Date: | Dec 21, 2005 7:32:41 am | |
| List: | org.oasis-open.lists.xacml | |
I think the idea of more defaults is a good one and I am forwarding this to the TC list.
However, based on past discussions, I believe the TC would be more likely to select "deny-overrides" as the default.
Hal
-----Original Message----- From: comm...@oasis-open.org [mailto:comm...@oasis-open.org] Sent: Tuesday, December 20, 2005 11:48 AM To: xacm...@lists.oasis-open.org Subject: [xacml-comment] Public Comment
Comment from: lud...@sics.se
Name: Ludwig Seitz Title: PhD Researcher Organization: Security, Policy and Trust Laboratory, SICS, Sweden Regarding Specification: XACML
Hello all, I wanted to suggest some points for the XACML standard with the goal of simplifying XACML Policies (by reducing their verboseness).
1. Define a default policy/rule combining algorithm, e.g. "permit- overrides", if the attribute PolicyCombiningAlgId/RuleCombiningAlgId is missing from a PolicySet/Policy tag.
2. Define "string-equal" as default MatchId attribute in SubjectMatch, ResourceMatch and ActionMatch tags.
3. Define "http://www.w3.org/2001/XMLSchema#string" as default DataType attribute in AttributeValue tags.
4. Define "urn:oasis:names:tc:xacml:1.0:subject:subject-id"/ "urn:oasis:names:tc:xacml:1.0:resource:resource-id"/ "urn:oasis:names:tc:xacml:1.0:action:action-id" as default values for the AttributeId attribute of SubjectAttributeDesignator/ ResourceAttributeDesignator/ ActionAttributeDesignator
Regards,
Ludwig Seitz
--------------------------------------------------------------------- To unsubscribe, e-mail: xacm...@lists.oasis-open.org For additional commands, e-mail:
xacm...@lists.oasis-open.org