Andrew Patterson wrote:
> Sam, without putting words in Adams mouth, I think he was asking about
> the precedence of include/exclude sections. It is a common problem is
> coming up with rule system like this - for instance one can look at the
> allow/deny pattern of the apache2.conf file for how to setup IP address
> ranges. In the apache case, there is an explicit clause that allows the
> order to be changed - either allow first then deny, or deny first then allow.
>
> In the ADL spec, this is mentioned as a "yet to be defined" (section 5.3.8).
>   
Indeed. I don't think the requirements have been adequately defined, so 
this remains one of the few little holes to plug properly in ADL.

- thomas


Reply via email to