Re: [ogpx] Protocol for permitting policy decisions

["Dickson, Mike (ISS Software)" <[e-mail]>]

Meadbah wrote:



i still like this scheme because a) it's really similar to the way

seed caps work, b) it adds flexibility to our system(s), and c) it

does what i was hoping... gives the AD the ability to make policy

decisions (like am i going to let this 15 year old user access

material that may land me in hot water with the local authorities.)



I may be mis-understanding all this since I'm still trying to come up to speed but isn't it the region that's making the policy decision here to allow/disallow a connect given what AD is representing about the user?  And yes, I agree that for this to work there must be trust established between the services involved.  I'm just confused by the above statement since it implies the AD is making a policy decision while it's really the RD that has the content (and hence the possible issue).  And the RD and AD may be run by two different entities....



Mike