OASIS eXtensible Access Control Markup Language (XACML) TC

Hi all,

Are there any plans to update the XACML 2.0 conformance test suite to meet
the errata?

The primary issue that I'm seeing is the change of the dayTimeDuration and
yearMonthDuration DataType URIs, for example from
"http://www.w3.org/TR/2002/WD-xquery-operators-20020816#dayTimeDuration" to
"urn:oasis:names:tc:xacml:2.0:data-type:dayTimeDuration".  These URI
changes cause 16 of the conformance tests to fail.

If the TC approves, I'm more than happy to update the conformance tests
myself.

Regards,
Craig

---------------------------------------------------------------
Craig Forster
Software Engineer
IBM Australia Development Labs
Argus == https://w3.webahead.ibm.com/w3ki/display/commonauthz/Home
Blog == http://blogs.tap.ibm.com/weblogs/craigforster/
---------------------------------------------------------------

Hi all,

I've gone ahead and updated the conformance tests for the dayTimeDuration
and yearMonthDuration DataType changes ONLY.  The attached .ziparchive file
includes only the files that have changed.

(See attached file: conformance-updates.ziparchive)

Here is a list of the changed files:

   conformance/policy/IIC102Policy.xml
   conformance/policy/IIC103Policy.xml
   conformance/policy/IIC104Policy.xml
   conformance/policy/IIC105Policy.xml
   conformance/policy/IIC106Policy.xml
   conformance/policy/IIC107Policy.xml
   conformance/policy/IIC150Policy.xml
   conformance/policy/IIC151Policy.xml
   conformance/policy/IIC152Policy.xml
   conformance/policy/IIC153Policy.xml
   conformance/policy/IIC154Policy.xml
   conformance/policy/IIC155Policy.xml
   conformance/policy/IIC156Policy.xml
   conformance/policy/IIC157Policy.xml
   conformance/policy/IIC231Policy.xml
   conformance/policy/IIC232Policy.xml
   conformance/request/IIC150Request.xml
   conformance/request/IIC151Request.xml
   conformance/request/IIC152Request.xml
   conformance/request/IIC153Request.xml
   conformance/request/IIC154Request.xml
   conformance/request/IIC155Request.xml
   conformance/request/IIC156Request.xml
   conformance/request/IIC157Request.xml
   conformance/request/IIC231Request.xml
   conformance/request/IIC232Request.xml

Regards,
Craig

---------------------------------------------------------------
Craig Forster
Software Engineer
IBM Australia Development Labs
Argus == https://w3.webahead.ibm.com/w3ki/display/commonauthz/Home
Blog == http://blogs.tap.ibm.com/weblogs/craigforster/
---------------------------------------------------------------


                                                                                                                                  
  From:       Craig Forster/Australia/IBM@IBMAU                                                                                   
                                                                                                                                  
  To:         XACML TC 

  


Hi Craig,


Since you are looking at the conformance tests, I was wondering if you

could check out this request that came in the comments list - see
attached

email.


The first suggestion looks like a simple errata fix, but I looked at
the 2nd

and it has to do with the order of the arguments. It wasn't clear to me
that

the order was wrong (i.e. the writer says that first and second should
be

switched in core spec based on what he sees in conf tests.)


In any event, only suggesting if you have time and are already familiar

with the tests the writer is referring to, i.e. quick check if writer
is correct

and core spec needs errata, and if so we can submit as issue to handle

by editors.


    Thanks,

    Rich


Craig Forster wrote:
OF4F73B289.16B9D3F9-ON4A25743D.00065A71-4A25743D.00068A88@au1.ibm.com" type="cite">
  
Hi all,

I've gone ahead and updated the conformance tests for the dayTimeDuration
and yearMonthDuration DataType changes ONLY.  The attached .ziparchive file
includes only the files that have changed.

(See attached file: conformance-updates.ziparchive)

Here is a list of the changed files:

   conformance/policy/IIC102Policy.xml
   conformance/policy/IIC103Policy.xml
   conformance/policy/IIC104Policy.xml
   conformance/policy/IIC105Policy.xml
   conformance/policy/IIC106Policy.xml
   conformance/policy/IIC107Policy.xml
   conformance/policy/IIC150Policy.xml
   conformance/policy/IIC151Policy.xml
   conformance/policy/IIC152Policy.xml
   conformance/policy/IIC153Policy.xml
   conformance/policy/IIC154Policy.xml
   conformance/policy/IIC155Policy.xml
   conformance/policy/IIC156Policy.xml
   conformance/policy/IIC157Policy.xml
   conformance/policy/IIC231Policy.xml
   conformance/policy/IIC232Policy.xml
   conformance/request/IIC150Request.xml
   conformance/request/IIC151Request.xml
   conformance/request/IIC152Request.xml
   conformance/request/IIC153Request.xml
   conformance/request/IIC154Request.xml
   conformance/request/IIC155Request.xml
   conformance/request/IIC156Request.xml
   conformance/request/IIC157Request.xml
   conformance/request/IIC231Request.xml
   conformance/request/IIC232Request.xml

Regards,
Craig

---------------------------------------------------------------
Craig Forster
Software Engineer
IBM Australia Development Labs
Argus == https://w3.webahead.ibm.com/w3ki/display/commonauthz/Home
Blog == http://blogs.tap.ibm.com/weblogs/craigforster/
---------------------------------------------------------------


                                                                                                                                  
  From:       Craig Forster/Australia/IBM@IBMAU                                                                                   
                                                                                                                                  
  To:         XACML TC <xacml@lists.oasis-open.org>                                                                               
                                                                                                                                  
  Date:       01/05/2008 09:58                                                                                                    
                                                                                                                                  
  Subject:    [xacml] Updating XACML 2.0 conformance tests to meet errata                                                         
                                                                                                                                  





Hi all,

Are there any plans to update the XACML 2.0 conformance test suite to meet
the errata?

The primary issue that I'm seeing is the change of the dayTimeDuration and
yearMonthDuration DataType URIs, for example from
"http://www.w3.org/TR/2002/WD-xquery-operators-20020816#dayTimeDuration" to
"urn:oasis:names:tc:xacml:2.0:data-type:dayTimeDuration".  These URI
changes cause 16 of the conformance tests to fail.

If the TC approves, I'm more than happy to update the conformance tests
myself.

Regards,
Craig

---------------------------------------------------------------
Craig Forster
Software Engineer
IBM Australia Development Labs
Argus == https://w3.webahead.ibm.com/w3ki/display/commonauthz/Home
Blog == http://blogs.tap.ibm.com/weblogs/craigforster/
---------------------------------------------------------------


---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  You may a link to this group and all your TCs in
OASIS
at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php

  
  

---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  You may a link to this group and all your TCs in OASIS
at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 

Hi Rich,

I agree with the first change, but not the second.

For the "xpath-node-equal" function, the order should be irrelevant.  If
any of the nodes in the set returned by the first argument match any of the
nodes returned in the second set then the function is true; the "any of"
condition is for both sets.

For the "xpath-node-match" function, the order is important as we're
checking equality for the nodes in the first set AND any of their children.
The description given in the spec indicates that the first set is the "big"
set, and we want to see if any of the individual nodes returned in the
second set match ANY of the nodes in the first set including children.

These semantics appear to be followed by the conformance tests, so I'm not
sure what change would be made?

Take test IIIG005:



From my reading, this is stating that if any of the 

There's also a typo in the errata regarding the dayTimeDuration and
yearMonthDuration DataType URIs.

In section A.3.7 (page 111) the DataTypes are incorrectly given as
"urn:oasis:names:tc:xacml:2.0:data-types:..." - note the plural
"data-types". Every other data type, and every other reference to the new
duration types have "data-type" in the singular.

Regards,
Craig

---------------------------------------------------------------
Craig Forster
Software Engineer
IBM Australia Development Labs
Argus == https://w3.webahead.ibm.com/w3ki/display/commonauthz/Home
Blog == http://blogs.tap.ibm.com/weblogs/craigforster/
---------------------------------------------------------------


                                                                                                                                  
  From:       "Rich.Levinson" 

I we forgot to discuss this issue during the call. I agree that this is 
a typo. We should call this new identifier "...:data-type:..." like all 
other data types. I am updating the errata and the next 3.0 core draft.

Best regards,
Erik

Craig Forster wrote:
> There's also a typo in the errata regarding the dayTimeDuration and
> yearMonthDuration DataType URIs.
>
> In section A.3.7 (page 111) the DataTypes are incorrectly given as
> "urn:oasis:names:tc:xacml:2.0:data-types:..." - note the plural
> "data-types". Every other data type, and every other reference to the new
> duration types have "data-type" in the singular.
>
> Regards,
> Craig
>
> ---------------------------------------------------------------
> Craig Forster
> Software Engineer
> IBM Australia Development Labs
> Argus == https://w3.webahead.ibm.com/w3ki/display/commonauthz/Home
> Blog == http://blogs.tap.ibm.com/weblogs/craigforster/
> ---------------------------------------------------------------
>
>
>                                                                                                                                   
>   From:       "Rich.Levinson" 

  


Hi All,


A couple of meetings ago I agreed to take an action item to "straighten
out"

where things stand w the conformance tests and recommend action:

    http://lists.oasis-open.org/archives/xacml/200805/msg00007.html


I have reviewed the situation and here are my preliminary findings:


1. the most recent collection of conformance tests was dated 10-Oct-05
and

    are located in this zip file submitted by Argyn Kuketayev:

      
http://www.oasis-open.org/committees/download.php/14846/xacml2.0-ct-v.0.4.zip

    This zip file contains a thousand plus  .xml files plus an overall
description

    file named ConformanceTests.html


 2. just 3 days later (13-Oct-05), Argyn submitted another batch of
tests that were suggested

    for section F of ConformanceTests.html. These were single
submissions to the repository

      
http://www.oasis-open.org/committees/download.php/14877/ConformanceTests.html

    These files were put on a wiki page as indicated in this email:

       http://lists.oasis-open.org/archives/xacml/200510/msg00015.html


  3. on 18-Apr-06, Argyn submitted a zip file containing the single
files in item 2 above

       with the following cover email:

       http://lists.oasis-open.org/archives/xacml/200604/msg00009.html

       the zip file is:

      
http://www.oasis-open.org/committees/download.php/17732/2006-04-16-conformance2.0-patch.zip


  4. Craig Forster submitted the email I am replying to here:

       http://lists.oasis-open.org/archives/xacml/200805/msg00000.html

       which has an attached zip file containing Craig's changes:

       http://lists.oasis-open.org/archives/xacml/200805/bin00000.bin


    5. there was considerable discussion about Oleg's initial email on
the conformance tests:

      
http://lists.oasis-open.org/archives/xacml-dev/200804/msg00001.html

       during April and May of 2008 in xacml-dev:

        http://lists.oasis-open.org/archives/xacml-dev/

       however, aside from some errata to the core doc, I do not
believe those discussions

        resulted in any changes proposed for the tests themselves.



Suggested course of action:


    1. we should review Argyn's changes in 2 and 3 above and decide if
they should be

       added to section F of ConformanceTests.html as he did in the
above ref'd link.

    2. we should replace the files in the xacml2.0-ct-v.0.4.zip file
with Craig's fixes

       and update that file to be named: xacml2.0-ct-v.0.5.zip

     3.  we should also update the ConformanceTests.html file to
include the changes

       from the above 2 items.

    4. I think the wiki that Argyn left should be regarded as an
artifact that we may or

       may not want to continue to use.


    Thanks,

    Rich



Craig Forster wrote:
OF4F73B289.16B9D3F9-ON4A25743D.00065A71-4A25743D.00068A88@au1.ibm.com" type="cite">
  
Hi all,

I've gone ahead and updated the conformance tests for the dayTimeDuration
and yearMonthDuration DataType changes ONLY.  The attached .ziparchive file
includes only the files that have changed.

(See attached file: conformance-updates.ziparchive)

Here is a list of the changed files:

   conformance/policy/IIC102Policy.xml
   conformance/policy/IIC103Policy.xml
   conformance/policy/IIC104Policy.xml
   conformance/policy/IIC105Policy.xml
   conformance/policy/IIC106Policy.xml
   conformance/policy/IIC107Policy.xml
   conformance/policy/IIC150Policy.xml
   conformance/policy/IIC151Policy.xml
   conformance/policy/IIC152Policy.xml
   conformance/policy/IIC153Policy.xml
   conformance/policy/IIC154Policy.xml
   conformance/policy/IIC155Policy.xml
   conformance/policy/IIC156Policy.xml
   conformance/policy/IIC157Policy.xml
   conformance/policy/IIC231Policy.xml
   conformance/policy/IIC232Policy.xml
   conformance/request/IIC150Request.xml
   conformance/request/IIC151Request.xml
   conformance/request/IIC152Request.xml
   conformance/request/IIC153Request.xml
   conformance/request/IIC154Request.xml
   conformance/request/IIC155Request.xml
   conformance/request/IIC156Request.xml
   conformance/request/IIC157Request.xml
   conformance/request/IIC231Request.xml
   conformance/request/IIC232Request.xml

Regards,
Craig

---------------------------------------------------------------
Craig Forster
Software Engineer
IBM Australia Development Labs
Argus == https://w3.webahead.ibm.com/w3ki/display/commonauthz/Home
Blog == http://blogs.tap.ibm.com/weblogs/craigforster/
---------------------------------------------------------------


                                                                                                                                  
  From:       Craig Forster/Australia/IBM@IBMAU                                                                                   
                                                                                                                                  
  To:         XACML TC <xacml@lists.oasis-open.org>                                                                               
                                                                                                                                  
  Date:       01/05/2008 09:58                                                                                                    
                                                                                                                                  
  Subject:    [xacml] Updating XACML 2.0 conformance tests to meet errata                                                         
                                                                                                                                  





Hi all,

Are there any plans to update the XACML 2.0 conformance test suite to meet
the errata?

The primary issue that I'm seeing is the change of the dayTimeDuration and
yearMonthDuration DataType URIs, for example from
"http://www.w3.org/TR/2002/WD-xquery-operators-20020816#dayTimeDuration" to
"urn:oasis:names:tc:xacml:2.0:data-type:dayTimeDuration".  These URI
changes cause 16 of the conformance tests to fail.

If the TC approves, I'm more than happy to update the conformance tests
myself.

Regards,
Craig

---------------------------------------------------------------
Craig Forster
Software Engineer
IBM Australia Development Labs
Argus == https://w3.webahead.ibm.com/w3ki/display/commonauthz/Home
Blog == http://blogs.tap.ibm.com/weblogs/craigforster/
---------------------------------------------------------------


---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  You may a link to this group and all your TCs in
OASIS
at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php

  
  

---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail.  You may a link to this group and all your TCs in OASIS
at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php