OASIS eXtensible Access Control Markup Language (XACML) TC

 View Only

RE: [xacml] default environment attributes and explicit attributes

  • 1.  RE: [xacml] default environment attributes and explicit attributes

    Posted 05-06-2005 01:19
     MHonArc v2.5.0b2 -->
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    
    

    xacml message

    [Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


    Subject: RE: [xacml] default environment attributes and explicit attributes


    > Is not *-one-and-only just guarantee you that there is exactly one value
    > in a bag?  What would you do with two values for current-time?
    
    That's the question.
    
    > then tests 016 018 and 020 fail, because the request message
    > includes a time, and the policies do time-one-and-only.
    
    My feeling is the test is wrong, the current-time must come from the
    environment and cannot come from the request message.
    
    	/r$
    
    -- 
    Rich Salz                  Chief Security Architect
    DataPower Technology       http://www.datapower.com
    XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
    
    


    [Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]