Skip to main content

Notice: This Wiki is now read only and edits are no longer possible. Please see: https://gitlab.eclipse.org/eclipsefdn/helpdesk/-/wikis/Wiki-shutdown-plan for the plan.

Jump to: navigation, search

Difference between revisions of "HR Directory Access Control Policy"

(Notes)
Line 2: Line 2:
 
[[Image:Higgins_logo_76Wx100H.jpg|right]]
 
[[Image:Higgins_logo_76Wx100H.jpg|right]]
  
[[Image:Hr-dept-use-case-p1.png]]
+
[[Image:Access-control-use-cases-hr-v2.png]]
 
+
[[Image:Hr-dept-use-case-p2.png]]
+
  
 
== Notes ==
 
== Notes ==
Access Control Policy Entity's higgins:operation sub-Attributes (the green arcs above) refer to the ''models'' of the Entity instances, not concrete Entity instances. At first glance it would appear that we'd need to implement Jim's new "expressing Entity models by using other Entities" approach. But since there is no need to dereference the green arcs this not actually the case.
+
The above is a second (v2) attempt at modeling this use-case.
 +
* A new diagramming style is used--it is more compact at representing the literal attributes of an Entity within a single rectangular box.
 +
* The entire use case now fits on one diagram (just barely!)
 +
* The new "group" higgins:subject sub-attribute is now being used
 +
* See [[HOWL Update 1.1.104]] for related changes to support this use case
  
One problem I [Paul] see with the above is that since Attributes are first class objects in our data model, they may be used by more than one class of Entity. But this is most often not the intended semantic. We want to be able to define which type of Attribute on which class (or its subclass) of Entity (or possibly its sub-part Entity). Teasing this out a bit I see that these dimensions of "resource scoping" should be orthogonal:
+
The problem found last week remains. First some background:
# what Attribute type(s) the Policy is talking about
+
* It seems clear that these two dimensions of "resource scoping" should be orthogonal:
# the set of Entities that the Policy is talking about
+
*# what Attribute type(s) the Policy is talking about
Either one or the other but not both of the above is optional. But the case that is causing problems here is this HR Directory case where wish to use these two dimensions simultaneously.
+
*# the set of Entities that the Policy is talking about
 +
*Either one or the other but not both of the above is optional.
 +
The problem is that ex:p[1-3] all "point" to an Attribute. But in fact the Attribute type AND the Entity Class must be specified (otherwise the policy will apply to ANY instance of any class that has this Attribute type).
  
 
==See Also==
 
==See Also==
 
* [[Access Control Use Cases]] - back to use cases
 
* [[Access Control Use Cases]] - back to use cases

Revision as of 17:43, 13 July 2008

{{#eclipseproject:technology.higgins}}

Higgins logo 76Wx100H.jpg

Access-control-use-cases-hr-v2.png

Notes

The above is a second (v2) attempt at modeling this use-case.

  • A new diagramming style is used--it is more compact at representing the literal attributes of an Entity within a single rectangular box.
  • The entire use case now fits on one diagram (just barely!)
  • The new "group" higgins:subject sub-attribute is now being used
  • See HOWL Update 1.1.104 for related changes to support this use case

The problem found last week remains. First some background:

  • It seems clear that these two dimensions of "resource scoping" should be orthogonal:
    1. what Attribute type(s) the Policy is talking about
    2. the set of Entities that the Policy is talking about
  • Either one or the other but not both of the above is optional.

The problem is that ex:p[1-3] all "point" to an Attribute. But in fact the Attribute type AND the Entity Class must be specified (otherwise the policy will apply to ANY instance of any class that has this Attribute type).

See Also

Back to the top