FERPA question

[Christopher Bongaarts]

On 10/26/2012 10:16 AM, Etan Weintraub wrote:

> I think you need to make it:
>
> Don’t release sn
>
> If (umbBuckley ne “Y”) { Release sn }

Combining this with Peter's observation, it should probably look like this:

If (umbBuckley ne "Y") { Release sn }
If (SP in (list of special SPs)) { Release sn }
Default deny

This is similar to what we would do (if we had a default release based 
on our suppression flag), except instead of a single rule with lots of 
SPs in a list (or metadata group), we would have a "release sn" rule 
once per special SP.  That lets us keep the policy exceptions for a 
particular SP in a file associated with that SP (which we combine to 
form the full attribute-filter.xml file loaded into our IdP).

-- 
%%  Christopher A. Bongaarts   %%  cab at umn.edu          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%