source: BUGS

abac0-leakabac0-meicompt_changesgec13mei-idmei-rt0-nmei_rt0mei_rt2mei_rt2_fix_1meiyap-rt1meiyap1rt2tvf-new-xml
Last change on this file was e9e28b7, checked in by Mike Ryan <mikeryan@…>, 9 years ago

return all credentials on query failure

  • Property mode set to 100644
File size: 466 bytes
Line 
1Partial proof returns entire graph
2    When a query fails libabac returns a partial proof, which is to say
3    a set of credentials it knows about that it thinks are relevant to
4    the proof.
5
6    Currently, when a query fails libabac returns all the credentials it
7    knows about.
8
9    In a proper implementation, the set of credentials returned will
10    only be those that are reachable from the principal and those that
11    have a path to the role in question.
Note: See TracBrowser for help on using the repository browser.