Method and device for taking an access control policy decision

摘要

A method and a device for taking a policy decision are disclosed. The policy decision device (S3) has access to objects being relatable to each other by relations of one or more relation types. The method comprises the steps of receiving (100) a request for the policy decision, the request specifying a first object of the objects and request information, obtaining (105) a policy matching to the request information and being applicable to a second object of the objects, obtaining (110) at least one propagation rule associated to the policy, the at least one propagation rule specifying at least one relation type of the one or more relation types, verifying if a relation path exits, the relation path linking the first object and the second object and consisting of one or more or the relations, verifying if the one or more relations of the relation path are in accordance with at least one of the at least one specified relation type, and if said the relation path are in accordance, applying the policy to the first object for taking (120) the policy decision.