directory-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Vincent Tence <>
Subject RE: AuthX information
Date Wed, 16 Mar 2005 22:34:06 GMT
> Rules are packaged in a group known as a ruleset, which uses a conflict
> resolution algorithm. The following algos are provided:

I should have said rules can be packages in arbitrary groups (a.k.a rule
sets). Each rule set uses its own conflict resolution algorithm.
Ultimately there is a root rule set that is responsible for the final
decision. Based on that decision (permit, deny or not applicable), the
Authorizer render an authorization decision, true/false, i.e. permit/deny.

-- Vincent

View raw message