Access Control Model draft - conditions for proceeding with operation

[rvh@qsun.mt.att.com (Richard V Huber)]

Section 5.4 contains the paragraph: "If they are all granted then the
operation MAY proceed.".  Section 5.5 contains the similar paragraph
"If this permission is granted, then the operation MAY proceed.".

I don't understand why these are both MAYs.  If all the necessary
permissions from the access control model are there, the operation MUST
proceed from an access control point of view.

There may be other conditions (size/time limits, etc.) that keep the
operation from proceeding and it might be good to mention them here,
but MAY still seems inappropriate from an access control point of
view.  I could live with "If they are all granted, the operation is
allowed from an access control point of view."

Rick Huber