eXtensible Access Control Markup Language (XACML) Version 3.0¶
OASIS. (2013). eXtensible Access Control Markup Language (XACML) Version 3.0.
Cited by¶
1 citation across 1 artifact.
Each citation links to the sentence it supports in the citing article.
Primes¶
- Identity Element
- Both values are forced by the algebra and they are opposites, so selecting the combining algorithm silently selects fail-open or fail-closed behaviour — two decisions usually made by different people months apart — unless the design enlarges the value set so the empty case has a unit of its own, as XACML does by returning NotApplicable when no rule applies, which relocates the fail-open/fail-closed choice to the enforcement point rather than removing it.
This sourceDefines the deny-overrides and permit-overrides rule-combining algorithms with opposite polarities, and returns NotApplicable - a third value rather than either algebraic unit - when no rule is applicable.
- Both values are forced by the algebra and they are opposites, so selecting the combining algorithm silently selects fail-open or fail-closed behaviour — two decisions usually made by different people months apart — unless the design enlarges the value set so the empty case has a unit of its own, as XACML does by returning NotApplicable when no rule applies, which relocates the fail-open/fail-closed choice to the enforcement point rather than removing it.
Verification¶
This reference passed the adversarial substantiation pipeline: it was checked to exist and to support the claim it is attached to. See how references were verified.
Registry ID ref:a4778ceb8335 · see in the full table