Stewart,
There is concern that a complicated ACM will not be widely deployed because it is too hard to use. It needs to be easy to do simple things and possible to do complex things, instead of hard to do everything. Configuration of the access control system needs to be as simple as possible. Simple and common tasks need to be easy to configure and require little expertise or domain-specific knowledge. Complex tasks are possible using additional mechanisms, which may require additional expertise. NEW: There is concern that a complicated ACM will not be widely deployed because it is too hard to use. Configuration of the access controlsystem needs to be as simple as possible. Simple and common tasksneed to be easy to configure and require little expertise ordomain-specific knowledge. Complex tasks are possible using additionalmechanisms, which may require additional expertise.
I see two references to leafs in the model. Maybe we could change them as follows: OLD: "This choice matches if all leafs present in the rule match the request. If no leafs are present, the choice matches all requests."; NEW: "This choice matches if all leaves present in the rule match the request. If no leaves are present, the choice matches all requests."; |