OASIS eXtensible Access Control Markup Language (XACML) TC

Re: [xacml] Problems with XACML and time

  • 1.  Re: [xacml] Problems with XACML and time

    Posted 07-18-2003 14:10
    Satoshi Hada wrote:
    > Thank you for the clarification. I don't think I fully
    > understand the problem, and I will read your mail more
    > carefully next week.
    
    OK, thanks for your careful consideration.
    
    > >> The simplest
    > >> way to make this change would be to change the definition of the
    > >> XACML time comparison functions to refer to XML Query instead of
    > >> XML Schema, as the time-equal function already does.
    > 
    > I like this change.
    > 
    > >> This solution does not solve the problem mentioned in this
    > >> paragraph from my original email:
    > 
    > A quick question:
    >
    > Do you mean even though we make the above change
    > we still have the problem (the change does not solve all the
    > problems)?
    
    Yes, changing the time comparison functions to refer to XML Query
    instead of XML Schema does not solve all the problems in my email.
    It solves one of them (the need to specify time zones for all
    times). But it doesn't solve the second problem (the problems
    that arise when midnight GMT falls during normal business
    hours, as it does in many parts of the world). Solving that
    problem will require an additional change, such as adding the
    time-in-range function.
    
    Thanks again for your help,
    
    Steve Hanna