200 likes | 325 Views
Permit. Pending. Deny. ! (Rule 1 or Rule 2). NA. Req Є R1 or Req R3 . Req Є R2 or Req Є R3 . Conflict and redundancy state. Conflicts. Pending. Redundancy. Conflict/redundancy checking. P1.dec state. P2.dec state. Permit. Permit. Pending. Deny. Pending. Deny. NA. NA.
E N D
Permit Pending Deny ! (Rule 1 or Rule 2) NA ReqЄR1 or Req R3 ReqЄR2 or ReqЄR3
Conflict and redundancy state Conflicts Pending Redundancy Conflict/redundancy checking P1.dec state P2.dec state Permit Permit Pending Deny Pending Deny NA NA Policy P1 Policy P2
Permit Pending Deny NA ! (Rule 1 or Rule 2) ReqЄR1 or Req R3 ReqЄR2 or ReqЄR3
Site A Site B VO 1 VO 1 Policies Resource Site Policies Site Policies Resource Resource VO 2 Resource VO2 Policies Resource VO 3 VO 3 Policies
Job Priority Job Submission • Site Policies • ------------------------ • Selected VO policies • Policies specified by the site administrator Job Control Job Scheduling Job Monitor Job Monitor Job Monitor Job Monitor Job Control
Site A Site A Policies Site B VO 4 VO 3 VO 2 VO 1 Resource Site B Policies VO2 Policies VO 3 Policies VO2 Policies VO 1 Policies Resource
Site A Site A Policies Site B VO 2 VO 1 VO 4 VO 3 Resource Site B Policies VO 1 Policies VO2 Policies VO 3 Policies VO2 Policies Resource Roles Site Policies Access Authorization Resources Control VO 1 VO2 Policies
Model Checking Test Request Generation Policy Creation Policies Properties Test Requests Policy Models XACML Policies Policy Implementation
Site PrivilegePolicies Propagate VO PrivilegePolicies Verify Site Configurations Synthesize SVOPMEConcept Diagram ConfigurationRecommendations
Property Verification Test Generation Policy Modeling Policies Properties Test Suites Policy Models XACML Policies Policy Implementation