Re: [xacml] AA02: Revised: A.x Structured Datatypes

From
Polar Humenn <>
Date
2002-10-17T14:57:00+00:00
ID
Thread
Re: [xacml] AA02: Revised: A.x Structured Datatypes
MHonArc v2.5.2 -->

















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [Elist Home]








Subject: Re: [xacml] AA02: Revised: A.x Structured Datatypes




From: Polar Humenn <>
To: Anne Anderson <>
Date: Thu, 17 Oct 2002 14:55:14 -0400 (EDT)








Opps. this doesn't type check I forgot one thing:

On Thu, 17 Oct 2002, Polar Humenn wrote:

> <Apply FunctionId="ext:get-public-key">
>    <SubectAttributeDesignatorWhere AttributeId="urn:....:key-info">
>       <SubjectMatch MatchId="function:string-equals">
>          <SubjectAttributeDesignator
>               AttributeId="urn:...subject-category"
>               DataType="xs:QName"
>          />
>          <AttributeValue DataType="xsQName">urn:....:access-subject</AttributeValue>
>       </SubjectMatch>
>    </SubjectAttributeDesignatorWhere>
> </Apply>
>
> where ext:get-public-key
> takes a ds:keyInfo and returns an xs:base64Binary, which is the public key
> from the <whatever> element of a ds:KeyInfo type.

should be:

> <Apply FunctionId="ext:get-public-key">
   <Apply FunctionId="ext:keyInfo-one-and-only">
>    <SubectAttributeDesignatorWhere AttributeId="urn:....:key-info">
>       <SubjectMatch MatchId="function:string-equals">
>          <SubjectAttributeDesignator
>               AttributeId="urn:...subject-category"
>               DataType="xs:QName"
>          />
>          <AttributeValue DataType="xsQName">urn:....:access-subject</AttributeValue>
>       </SubjectMatch>
>    </SubjectAttributeDesignatorWhere>
   </Apply>
> </Apply>
>

where ext:keyInfo-one-and-only takes a bag of ds:KeyInfo and returns a
ds:KeyInfo if and only if there is only one element in the bag,
indeterminate otherwise.


> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>
>