Hi,

I have read a technical report  by Globus Team titled "Globus Toolkit Java 
Authorization Framework(2007)". I have a query regarding Policy Enforcement 
Points(PEPs); as mentioned in the earlier document "Authorization processing 
for Globus Toolkit Java Web Services (2005)". In the  later document the 
'Authorization Engine'  had included PEP along with the Master PDP; but in the 
current document(2007) I don't see any mention of PEP. Can you please refer to 
me any document or example code(paper etc) and/or explain about the policy 
enforcement task (PEP) is either done (inbuilt) in the PIPs or somewhere else? 
For example I have several entities having multiple policies, involved in 
decision making process; there are chain of PDPs for authorization and there 
are several PIPs (Policy Information Points) containing attributes for 
resources, subject etc for example  those PDPs are implemented by calling out 
PDPs in XACML, PERMIS, VOMS.  


Regards
________________________

Jan Muhammad



Reply via email to