Issue 1761:  DelegationDirectivePolicy Needed (sec-rev)
Source:  (, )
Nature:  Enhancement
Severity:  Significant
Summary: Summary: We need a delegation directive policy in order to convey on an
 object reference, and elsewhere, that whether the credentials
 beign used are to be delegated or not.
 
 
 

Resolution: 
Revised Text: 
Actions taken:
July 30, 1998: received issue
November 13, 1998: closed issue
Discussion: 
 Security RTF 1.5 action 6 in ptc/98-11-02
End of Annotations:=====
Return-Path: <www>
Date: Fri, 31 Jul 1998 09:06:18 -0400
From: www
To: juergen@omg.org, web-incoming@omg.org
Subject: WWW Form output

Name: Polar Humenn
Company: Adiron, LLC
Email: polar@adiron.com
Notification: Yes
Specification: Services (Security)
Section: A.2
Formal #: who knows
Version: v1.2 draft 
Revision_Date: 5 jan 98
Page: 15-104
Nature: Enhancement
Severity: Significant
full_desc: DelegationDirectivePolicy Needed

We need a delegation directive policy in order to convey on an
object reference, and elsewhere, that whether the credentials
beign used are to be delegated or not.

Note: This is not the same, nor does it duplicate the 
SecurityAdmin::DelegationPolicy. Nor, is set_credentials
operation on SecuritLevel2::Current good enough.

I suggest the following addtions for Security.idl under
// Policies used to control attributes of a binding to a target

const CORBA::PolicyType SecDelegationDirectivePolicy = 16; // or some
number

In SecurityLevel2.idl

// Assuming we change SecurityLevel2::DelegationMode to
DelegationDirective
// as per a previous issue I submitted.
enum DelegationDirective { Delegate, NoDelegate };

Add:

interface DelegationDirectivePolicy : CORBA::Policy {
	attribute readonly DelegationDirective delegation_directive;
};

Add to the definition of SecurityLevel2::Current on page 15-105

create_delegation_directive_policy

This operation is used to create a local Delegation Directive Policy
Object.

	DelegationDirectivePolicy create_delegation_directive_policy(
		DelegationDirective     delegation_directive
	);

Parameters

delegation_directive	The delegation directive to place on the 
			credentials.

Return Value		An object reference to a new Delegation
			Directive Policy object containing the
			delegation directive passed through the
			delegation_directive parameter.
submit: Submit Issue Report