This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
dido:public:ra:xapend:xapend.b_stds:tech:oasis:xacml [2020/11/13 02:28] nick ↷ Links adapted because of a move operation |
dido:public:ra:xapend:xapend.b_stds:tech:oasis:xacml [2021/08/17 13:34] (current) murphy [Introduction] |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ===== OASIS: eXtensible Access Control Markup Language (XACML) ===== | ===== OASIS: eXtensible Access Control Markup Language (XACML) ===== | ||
| - | [[dido:public:ra:xapend:xapend.b_stds:tech:oasis| return to the OASIS Standards ]] | + | [[dido:public:ra:xapend:xapend.b_stds:tech:oasis:start| return to the OASIS Standards ]] |
| <table> | <table> | ||
| Line 17: | Line 17: | ||
| ==== Introduction ==== | ==== Introduction ==== | ||
| : //The eXtensible Access Control Markup Language (XACML) [XACML-3] | : //The eXtensible Access Control Markup Language (XACML) [XACML-3] | ||
| - | defines an architecture and a language for access control | + | defines an architecture and a language for [[dido:public:ra:xapend:xapend.a_glossary:a:accesscontrol|access control]] |
| - | ([[dido:public:ra:xapend:xapend.glossary:a:authorization| authorization]]). The language consists of requests, responses, and | + | ([[dido:public:ra:xapend:xapend.a_glossary:a:authorization| authorization]]). The language consists of requests, responses, and |
| - | policies. Clients send a request to a server to query whether a | + | policies. Clients send a request to a [[dido:public:ra:xapend:xapend.a_glossary:s:server|server]] to query whether a |
| given action should be allowed. The server evaluates the request | given action should be allowed. The server evaluates the request | ||
| against the available policies and returns a response. The policies | against the available policies and returns a response. The policies | ||
| implement the organization's access control requirements.[[https://tools.ietf.org/html/rfc7061]]// | implement the organization's access control requirements.[[https://tools.ietf.org/html/rfc7061]]// | ||
| + | |||
| + | /**=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- | ||
| + | /* To add a discussion page to this page, comment out the line that says | ||
| + | ~~DISCUSSION:off~~ | ||
| + | */ | ||
| + | ~~DISCUSSION:on|Outstanding Issues~~ | ||
| + | ~~DISCUSSION:off~~ | ||