Exercise 2

Using the visualiser below, try to answer the following questions:

  1. Define a policy P which includes R1 such that P evaluates to
    • Deny when B is true, else
    • Permit.
  2. Define a policy P which includes R1 such that P evaluates to:
    • Deny if any attribute is Unkown, else
    • Permit
  3. Define a policy P which includes R1 such that P evaluates to:
    • Permit when exactly two attributes are True and the other one is False,
    • Deny.



Try to change the operator from POV to the other operators to observe the differences.


Last modified December 5, 2019