- From: Frederick Hirsch via cvs-syncmail <cvsmail@w3.org>
- Date: Fri, 18 Jun 2010 23:37:00 +0000
- To: public-dap-commits@w3.org
Update of /sources/public/2009/dap/policy
In directory hutz:/tmp/cvs-serv7319
Modified Files:
Framework.html
Log Message:
define rule
Index: Framework.html
===================================================================
RCS file: /sources/public/2009/dap/policy/Framework.html,v
retrieving revision 1.11
retrieving revision 1.12
diff -u -d -r1.11 -r1.12
--- Framework.html 18 Jun 2010 23:34:28 -0000 1.11
+++ Framework.html 18 Jun 2010 23:36:58 -0000 1.12
@@ -411,8 +411,18 @@
<li><p>it provides a way of ensuring that the correct precedence is applied when processing rules. This makes some rules easier to write because their applicability is more narrowly scoped by their enclosing policy. More significantly, it ensures that security requirements determined by one authority are not wrongly overridden by rules provided by a subordinate authority.</p></li>
</ul>
<p>
- Simplistically, each rule is specified by defining a <strong><em><dfn id="condition">condition</dfn></em></strong>, which is a set of statements which must be satisfied in order for that particular rule to apply, and an <strong><em><dfn id="effect">effect</dfn></em></strong> which represents the rule's outcome – ie the trust domain for trust domain requests and whether that rule indicates that the access request should be permitted or not for access requests.
- </p>
+<dl>
+<dt><dt><dfn id="rule">rule</dfn></dt>
+<dd><p>Simplistically, each rule is specified by defining
+ a <strong><em><dfn id="condition">condition</dfn></em></strong>,
+ which is a set of statements which must be satisfied in order for
+ that particular rule to apply, and
+ an <strong><em><dfn id="effect">effect</dfn></em></strong> which
+ represents the rule's outcome – ie the trust domain for trust
+ domain requests and whether that rule indicates that the access
+ request should be permitted or not for access requests.
+ </p></dd>
+</dl>
<!-- ILLUSTRATION POLICY LANGUAGE MODEL -->
<object type="image/svg+xml" data="languagemodel.svg">
<img src="languagemodel.png" alt="graphical representation of the XACML policy language model" title="DAP policy language model, derived from XACML Specification Schema" width="250" /> </object>
Received on Friday, 18 June 2010 23:37:02 UTC