Subject: [sacm] [draft-ietf-sacm-architecture] Section 3.1.3 - Controller - Authorization (#27)

From: Jim Schaad <[email-masked]>
Date: Wed, 08 Jul 2015 16:36:57 -0700

version -03

Do you expect that the authorization enforcement is going to happen in the control plane or on the provider?  The first means that the controller needs to understand every protocol between consumers and providers while the latter means that you need to push some information down.  Both seem to be a problem.

---
Reply to this email directly or view it on GitHub:
https://github.com/sacmwg/draft-ietf-sacm-architecture/issues/27