OASIS eXtensible Access Control Markup Language (XACML) TC

  • 1.  Re: [xacml] subjects

    Posted 11-04-2002 18:06
     MHonArc v2.5.2 -->
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    

    xacml message

    [Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


    Subject: Re: [xacml] subjects


    Polar,
    I'm trying to understand your proposal.
    what you do is:
    attr-desig-type(attrid, data-type, issuer, must-be-present)
        subject-qualifier(match-id, attr-value)
        subj-attr-desig-type(0...many subj-qualifier)
            qualified-subj-attr-desig(from-subjects)
    
    then qualified-subj-attr-desig is used in the subject-match in the target
    and in the apply element.
    
    it looks like subj-attr-desig-type is not used by itself.
    
    subject expression in the target is now quite complicated.
    I think I need more time to make up my mind about your proposal.
    Simon