..And to write rules on anonymous subject I presume one has to use <anysubject> for target? Right? Does missed subject have applicable rules written on <anysubject> ? Daniel; -----Original Message----- From: Anne Anderson To: XACML TC Sent: 10/11/02 9:04 AM Subject: Re: [xacml] Question about Anonymous Access Subject? On 11 October, Hal Lockhart writes: [xacml] Question about Anonymous Access Subject? > Is there a cannonical way to represent an anonymous access subject in the > Request Context? This seems to me to be an extremely common case that should > be described in the spec. (My preference would be to leave out the access > subject entirely, but I see that it is mandatory) Yes, there is a canonical way. The sequence of Attributes under <Subject> is minOccurs=0, so you can have a Request Context in which the one <Subject> element has no Attributes (such as no subject-id). Anne -- Anne H. Anderson Email:
Anne.Anderson@Sun.COM Sun Microsystems Laboratories 1 Network Drive,UBUR02-311 Tel: 781/442-0928 Burlington, MA 01803-0902 USA Fax: 781/442-1692 ---------------------------------------------------------------- To subscribe or unsubscribe from this elist use the subscription manager: <
http://lists.oasis-open.org/ob/adm.pl >