[glue-wg] DENY rules

[Burke, S (Stephen)]

Laurence Field [mailto:Laurence.Field at cern.ch] said:
> The syntax of the FQAN is defined by the people who worry about the 
> security model. We should not have to discuss this. In Glue we should 
> just make the statement that the FQAN should be used and 
> reference the 
> relevant security specification where this is defined.

The syntax of the FQAN itself is defined by the VOMS developers, but
they don't consider how it should be published in GLUE, or in general
how it should be used for matching. This is similar to the situation
with access protocol names - in principle they should be defined by SRM,
but in practice they aren't so we have to do it. Indeed the recent
review of authorsiation in EGEE basically endorsed the GLUE model and
will change both the WMS and LCMAPS to follow it!

Stephen