Changes between Version 8 and Version 9 of XACML


Ignore:
Timestamp:
03/09/10 17:11:43 (11 years ago)
Author:
pjkersha
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • XACML

    v8 v9  
    207207}}} 
    208208Any rule which follows for which a match is made, grants access.  For example,  
    209  * The `ResourceBased` rule, restricts based on resource URI only.  It overrides the previous `DenyAllRule` for requests to `http://localhost/resource-only-restricted`.  
     209 * The `ResourceBased` rule, restricts based on resource URI only.  It overrides the previous `DenyAllRule` for requests to `http://localhost/resource-only-restricted`.  No Subjects are defined here so access is open to it from any subject. 
    210210 * the rule ID'd `AtLeastOneSubjectAttributeBased` grants access to any URI which begins with `http://localhost/at-least-of-subject-role-restricted`, provided the subject (the person or entity requesting access) has at least one of the attributes, `staff`, `admin` or `postdoc`. 
    211211