RE: [sunxacml-discuss] Sunxacml and hierarchical roles

[Jake W. <Ja...@ne...>]

Dear all,

Thanks to Seth and Argyn for the answers..

I am now having a basic question. In XACML-RBAC profile, it has defined
Permission <PolicySet>, Role <PolicySet> and Role Assingment <Policy>
separately. Can I use the SUNXACML API to create these files
individually without the policy referencing actually taking place at
this stage?=20

If there is any sample code regarding this issue, please advise..

Many thanks.
jake=20

>-----Original Message-----
>From: argyn [mailto:ar...@co...]=20
>Sent: 24 January 2006 01:33
>To: Jake Wu
>Cc: sun...@li...
>Subject: Re: [sunxacml-discuss] Sunxacml and hierarchical roles
>
>Jake Wu wrote:
>
>>Dear all,
>>
>>Could someone tell me if Sunxacml APIs support the use of=20
>hierarchical=20
>>Role Base Access Control? i.e. implement the specification=20
>which is at=20
>>http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-
>rbac-prof
>>i
>>le1-spec-os.pdf
>>
>>Many thanks.
>>jake
>>
>>=20
>>
>>
>>-------------------------------------------------------
>>This SF.net email is sponsored by: Splunk Inc. Do you grep=20
>through log=20
>>files for problems?  Stop!  Download the new AJAX search engine that=20
>>makes searching your log files as easy as surfing the  web. =20
>DOWNLOAD SPLUNK!
>>http://sel.as-us.falkag.net/sel?cmd=3Dk&kid=103432&bid#0486&dat=121642
>>_______________________________________________
>>sunxacml-discuss mailing list
>>sun...@li...
>>https://lists.sourceforge.net/lists/listinfo/sunxacml-discuss
>>
>>
>> =20
>>
>Yes, it does, but not out-of-the-box. You have to write a=20
>finder yourself. I've implemented rbac with sunxacml in one=20
>company, and it worked fine. I think i posetd a couple of=20
>times on the subject in this list a year ago.
>
>thanks
>Argyn
>
>