Get rid of advice - Githubissues

davidjbrossard / alfa-authorization-language

A repository for the IETF RFC proposal for ALFA 2.0

Other

0 stars 0 forks source link

Get rid of advice #14

Closed davidjbrossard closed 1 week ago

davidjbrossard commented 1 week ago

XACML and ALFA both define:

advice
obligation Both elements are identical in structure and content but differ in intent: the PEP must comply with an obligation while it may comply with an advice. To simplify the language we could keep obligation and add a boolean flag that tells the PEP whether it has to understand and process the obligation.

davidjbrossard commented 1 week ago

Switching from 2 elements (advice and obligation) to a single one with a new parameter (the flag) is too much work for now and not worth it. We can revisit later.