source: BUGS

Last change on this file was e9e28b7, checked in by Mike Ryan <mikeryan@…>, 14 years ago

return all credentials on query failure

  • Property mode set to 100644
File size: 466 bytes
Line 
1Partial proof returns entire graph
2    When a query fails libabac returns a partial proof, which is to say
3    a set of credentials it knows about that it thinks are relevant to
4    the proof.
5
6    Currently, when a query fails libabac returns all the credentials it
7    knows about.
8
9    In a proper implementation, the set of credentials returned will
10    only be those that are reachable from the principal and those that
11    have a path to the role in question.
Note: See TracBrowser for help on using the repository browser.