OASIS eXtensible Access Control Markup Language (XACML) TC

 View Only
Back to discussions
Expand all | Collapse all

Decision required: Issue#70: Must Policy[Set]Id match value used in acorresponding Policy[Set]IdReference?

  • 1.  Decision required: Issue#70: Must Policy[Set]Id match value used in acorresponding Policy[Set]IdReference?

    Posted 03-16-2007 20:11 
    PROBLEM

The question is, when one policy references another, as in

    

    referenced policy:

   

whether "xxxx" must equal "yyyy".

This question may also apply to Policy[Set]IdRef values in 
CombinerParamters.

Please state what you want the spec to say, and why.

WHAT THE SPEC SAYS NOW

The XACML 2.0 Specification never flat-out states that the value used in 
   a Policy[Set]IdReference must match the value of the Policy[Set]Id 
used in the referenced policy, and if so, does not state the algorithm 
for doing the id matching.  It says

     "The


Related Content