Last change
on this file was
e9e28b7,
checked in by Mike Ryan <mikeryan@…>, 14 years ago
|
return all credentials on query failure
|
-
Property mode set to
100644
|
File size:
466 bytes
|
Rev | Line | |
---|
[e9e28b7] | 1 | Partial proof returns entire graph |
---|
| 2 | When a query fails libabac returns a partial proof, which is to say |
---|
| 3 | a set of credentials it knows about that it thinks are relevant to |
---|
| 4 | the proof. |
---|
| 5 | |
---|
| 6 | Currently, when a query fails libabac returns all the credentials it |
---|
| 7 | knows about. |
---|
| 8 | |
---|
| 9 | In a proper implementation, the set of credentials returned will |
---|
| 10 | only be those that are reachable from the principal and those that |
---|
| 11 | have a path to the role in question. |
---|
Note: See
TracBrowser
for help on using the repository browser.