access access-control access_control accesscontrol acl authentication authorisation authorization bacc control extensible extensible-access-control-markup-language fedora identity language learning markup markup-language mozdata oasis openid policy rbac security software webservices xacml xml
XACML
From Wikipedia, the free encyclopedia
XACML stands for eXtensible Access Control Markup Language. It is a declarative access control policy language implemented in XML and a processing model, describing how to interpret the policies. It is a replacement for IBM's XML access control language (XACL)[1] which is no longer in development.[2]
Latest version 2.0 was ratified by OASIS standards organization on 1 February 2005. As of 2007, version 3.0 is in preparation and will add generic attribute categories for the evaluation context and policy delegation profile (administrative policy profile).
[edit] See also
[edit] Notes
- ^ Hada, Satoshi and Kudo, Michiharu (October 16, 2000). "XML Access Control Language: Provisional Authorization for XML Documents". Tokyo Research Laboratory, IBM Research. http://www.trl.ibm.com/projects/xml/xacl/xacl-spec.html. Retrieved on 2008-06-08.
- ^ "XACL". Web and XML Glossary (dret.net). http://dret.net/glossary/xacl. Retrieved on 2008-06-08.
[edit] External links
- Extensible Access Control Markup Language
- OASIS XACML committee website
- OASIS declaration of issues with two software patents of IBM
- Axiomatics implementation of the XACML 3.0 draft
- Google Code Enterprise Java XACML Implementation
- JBoss XACML - Open Source LGPL licensed library
- HERAS-AF: An Open Source Project providing an XACML-based Security Framework
- XACML 2.0 PDP and PAP implemented as Axis2 web services
- XACML Tutorial with a Use Case Scenario for Academic Institutions
- XACML authorization for many PAM enabled applications
|