On 3 September, Polar Humenn writes: Re: [xacml] proposal for action-id, subject-id, and required Attributes > Anne, again, just requiring the Subject to have "one other" attribute, > which is "typically" the "subject-id", doesn't really buy you much. > > I suggest that we should take a stance of being consistent across all > subjects, actions, and resources. For each, either that no attributes are > guarranteed to be there, or they all have at least one attribute available > and we know explicitly what that attribute is. I vote for "no attributes are guaranteed to be there". I do not care whether we make minOccurs=0 or 1, although I think we can eliminate some meaningless cases by requiring at least 1, even if we do not specify which one that is. Anne -- Anne H. Anderson Email:
Anne.Anderson@Sun.COM Sun Microsystems Laboratories 1 Network Drive,UBUR02-311 Tel: 781/442-0928 Burlington, MA 01803-0902 USA Fax: 781/442-1692