Re: [poe] Note on Policy Inference

> btw., you also don't know whether a policy expression actually includes all of its rules..

Right, this needs to be considered and managed by the provider/publisher of the Policies. This could result in having only a single Permission/Prohibition in Policies and for the evaluation they have to be combined - hm, I'm not aware that the IM tells anything about that case, it defines only inheritance as relationship between Policies.

Further it could be the case that the same Permission/Prohibition (= same asset(s), same target(s), same assigner, same assignee(s), same action(s), same constraints) is in multiple Policies - in such an environment it could help to have ids for the instances of Permission and Prohibition.

(Btw: the policy with the single prohibition above should have <http://example.com/policy:02> as id, I guess.)


-- 
GitHub Notification of comment by nitmws
Please view or discuss this issue at https://github.com/w3c/poe/issues/201#issuecomment-311023817 using your GitHub account

Received on Monday, 26 June 2017 10:37:27 UTC