Comments on policy schema 18f:
1. <xs:complexType name="AttributeValueType" takes a sequence of
0 - unbounded xs:any elements.
Shouldn't it take exactly 1 xs:any element? We do not define
how to match against an AttributeValue containing multiple
values.
2. CategorizedSubjectAttributeDesignator is not defined.
Our resolution to CR#0154 says to rename all existing
SubjectAttributeDesignator usages to
CategorizedSubjectAttributeDesignator. There are a few other
items not resolved, but I thought this one was.
3. Similarly, QualifiedSubjectAttributeDesignator still takes a
SubjectMatch, but our resolution to CR#0154 says to use
"SubjectQualifier" instead.
Anne
--
Anne H. Anderson Email:
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311 Tel: 781/442-0928
Burlington, MA 01803-0902 USA Fax: 781/442-1692
