Policy Discription Language Module
Requirements & design

G.M. Venekamp
venekamp@nikhef.nl

[width=4cm]figures/datagrid

Abstract:

When a user or service has been authenticated and is allowed into the system, the system must provide the user or service with a suitable environment. In order to decide which environment is correct, the user or service needs to provide a set of credentials. Based upon these credentials, the system assigns the allowed resources.

In order to accomplish the above, the system must know about policies for assigning resources to a user or service. To be as flexible as possible, a configuration file is used for describing policies. A small and simple yet powerful language has been developed to describe the policy rules of a site. This document describes the policy description language design.

• document version: 0.1
  

  
  
  
  

• Document history:
  
  

  Date	Version	Author	Change
  10 February 2003	0.1	G.M. Venekamp	Initial document.

0