ebxml-regrep message

Subject: RE: Comments on ebXML RegRep Security-002.doc (jdm)

From: "Nieman, Scott" <Scott.Nieman@NorstanConsulting.com>
To: 'Krishna Sankar ' <ksankar@cisco.com>,"'Munter, Joel D '" <joel.d.munter@intel.com>,"'ebxml-regrep@lists.ebxml.org '" <ebxml-regrep@lists.ebxml.org>
Date: Tue, 19 Dec 2000 10:05:45 -0600

 > Lines 127-128:  Are you stating that there is a requirement to allow for 
> private areas for the users or at the "role" level? 
<ks> 
My point was that the scheme should *not* preclude the private areas. By 
saying that, we are requiring the 
capability to allow private spaces 
</ks> 

Private areas should be allowed only on "groups" of users.  Groups do not
imply the same role.  An example Group could be "ebxml registry project
team".

In light of that, I believe that one requirement is the ability to define
groups based on a aggregation of users.

Scott