You are viewing a plain text version of this content. The canonical link for it is here.

Posted to imperius-user@incubator.apache.org by David Wood <da...@us.ibm.com> on 2008/08/07 12:01:44 UTC

PolicyEvaluatorImpl.evaluatePolicy() return value

I would like to be able to use policies for both "authorization" and 
"obligation".  To facilitate this, it would be useful to have a single 
evaluation method, used for both situations, that always returned the 
result  of the condition statement evaluation.  One solution could be to 
change  PolicyEvaluator interface from:

    public Object evaluatePolicy(SPLPolicy cp, Map instances) throws 
SPLException;

to

    public EvaluationResults evaluatePolicy(SPLPolicy cp, Map instances) 
throws SPLException;

The new EvaluationResults object could contain the status code that is 
currently being returned,  as well as the result of the condition.  This 
object could hold any other information of interest too of course. 
Thoughts?

David Wood 
Network Server System Software Group
IBM TJ Watson Research Center
dawood@us.ibm.com
914-784-5123 (office), 914-396-6515 (mobile)