RFC 3744: deny-before-grant required?

Section 8.1.1 (http://greenbytes.de/tech/webdav/rfc3744.html#acl.preconditions)
of RFC 3744 specifies that deny-before-grant is a requirement.  It
does not follow this with a condition stating that it only applies if
the constraint is set, as is done for grant-only and no-invert.

Is this omission of a condition under which this preconditon holds
intentional?  Is deny-before-grant a requirement?

thanks,
Tim

Received on Friday, 30 June 2006 17:08:22 UTC