RE: [hrac resources]

[John Sebes <ejs@tis.com>]

At 09:34 AM 8/6/98 -0400, John Barkley wrote:
>Do you reproduce content which is needed for access decisions as metadata
>somewhere else? I should think probably not. Keeping a list of attending
>physicians and/or list of patients as metadata redundant to content
>has lots of problems.
>
>What you likely have to do is to have an access control system that
>is able to access content as security metadata.

Yes. In an OO world, the access decision code would have to invoke
operations on the object being access controled (to obtain some part of its
internal state) and invoker operations on other objects that contain meta
data about the object being access controled, and then combine the
information in an access decision computation.
EJS
===

----------------
Broadcast message to hrac-rfp from John Sebes <ejs@tis.com>.
Go to http://cadse.cs.fiu.edu/omg/hrac-rfp to browse the mail list archive.