search

lmontrieux / rbacDSL

A text-based DSL for Role-Based Access Control
Eclipse Public License 1.0
2 stars 0 forks source link

Conflicts between SSoD and DSoD should trigger error #2

Closed lmontrieux closed 10 years ago

lmontrieux commented 10 years ago

There should not be both an SSoD and a DSoD constraint between the same two roles. For example:

ssod{(Role1 Role2)} dsod{(Role1 Role2)}

Doesn't make much sense (dsod doesn't add anything). An error should be raised. Since it is the dsod constraint that is superfluous, it is where the error should appear.

lmontrieux commented 10 years ago

On second thought, this should not raise an error, but a warning. Indeed, SSoD implies DSoD. In the scenario above, the policy is not incorrect, but the DSoD declaration is redundant.

lmontrieux commented 10 years ago

Fixed in 583b8ad414