Changes between Version 9 and Version 10 of GEC10Auth
- Timestamp:
- 04/12/11 15:58:57 (13 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
GEC10Auth
v9 v10 50 50 * ABAC should be added to the GENI AM API as an alternative means of authorization 51 51 * Does not replace existing credentials 52 * Allowgaining experience with ABAC52 * Supports gaining experience with ABAC 53 53 * An existing aggregate should be ABAC-enabled 54 54 * Aggregates are not required to add ABAC support 55 * Allowgaining experience with ABAC55 * Supports gaining experience with ABAC 56 56 * ProtoGENI AM is the likely first target 57 57 * Experience and proposed next steps to be reported at GEC11 … … 107 107 * Existing mechanism is based on capabilities NOT role like ABAC. 108 108 * Be clear 109 * Policies should be explicit, not in textas currently109 * Policies should be explicit, not in code as currently 110 110 * Avoid complex logic that people won't understand 111 111 * Avoid negotiation of what attributes to pass
