MHonArc v2.5.2 -->
xacml message
[Date Prev]
| [Thread Prev]
| [Thread Next]
| [Date Next]
--
[Date Index]
| [Thread Index]
| [Elist Home]
Subject: [xacml] [CR] AttributeSelectorIndirect
Based on the discussion on Monday call, Simon and I agreed to changing the
schema to support an AttributeSelectorIndirect element to retrieve a XPath
expression from the context. I wonder whether the name of this element is
appropriate or not.
<xs:complexType name="AttributeSelectorBaseType">
<xs:element ref="xacml:XPathNamespace" minOccurs="0" maxOccurs
="unbounded"/>
<xs:attribute name="DataType" type="xs:anyURI" use="optional"/>
<xs:attribute name="XPathVersion" type="xs:anyURI" use="optional" default
="http://www.w3.org/TR/1999/Rec-xpath-19991116"/>
</xs:complexType>
<xs:complexType name="AttributeSelectorType">
<xs:complexContent>
<xs:extension base="AttributeSelectorBaseType">
<xs:attribute name="RequestContextPath" type="xs:string" use
="required"/>
</xs:extension>
</xs:complexContent>
</xs:complexType>
<xs:complexType name="AttributeSelectorIndirectType">
<xs:extension base="AttributeSelectorBaseType">
<xs:choice>
<xs:element ref="xacml:SubjectAttributeDesignator"/>
<xs:element ref="xacml:ResourceAttributeDesignator"/>
<xs:element ref="xacml:ActionAttributeDesignator"/>
<xs:element ref="xacml:EnvironmentAttributeDesignator"/>
</xs:choice>
</xs:extension>
</xs:complexType>
<xs:element name="AttributeSelector" type="AttributeSelectorType"/>
<xs:element name="AttributeSelectorIndirect" type
="AttributeSelectorIndirectType"/>
<xs:element name="XPathNamespace" type="xacml:XPathNamespaceType"
substitutionGroup="xacml:AbstractDefaults"/>
<xs:complexType name="XPathNamespaceType">
<xs:attribute name="NamespaceURI" type="xs:anyURI"/>
<xs:attribute name="Prefix" type="xs:string" use="optional"/>
</xs:complexType>
Sample text for this element:
5.28. Element <AttributeSelectorIndirect>
The <AttributeSelectorIndirect> element is a free-form pointing device into
the <xacml-context:Request> element using an attribute designator. The
actual xpath expression is retrieved from the context pointed by that
attribute designator. Other than that, the semantics is the same with
<AttributeSelector> element. Support for the <AttributeSelectorIndirect>
element is OPTIONAL.
The <AttributeSelectorIndirect> element is of AttributeSelectorIndirectType
complex type.
The <AttributeSelectorIndirect> element has either one of the following
elements:
SubjectAttributeDesignator
ResourceAttributeDesignator
ActionAttributeDesignator
EnvironmentAttributeDesignator
Michiharu
IBM Tokyo Research Laboratory, Internet Technology
Tel. +81 (46) 215-4642 Fax +81 (46) 273-7428
[Date Prev]
| [Thread Prev]
| [Thread Next]
| [Date Next]
--
[Date Index]
| [Thread Index]
| [Elist Home]
Powered by eList eXpress LLC