xacml combiner alg extension points

xacml extension points proposal.

 

Polar pointed out that previous xacml extension 
proposal is somewhat misleading with it's use of

@MustUnderstand attribute and where parameters are 
interpreted.

 

Here is cleaned up version, hopefully.

 

Proposal:

Allow element of type 
<xacml:CombinerParametersType> as an optional child of 
<xacml:PolicySet> and <xacml:Policy> elements. 
<xacml:CombinerParameters> element contains a list of parameters specific 
to the enclosing combining algorithm. Combiner parameters are input to the combining algorithm only and can not be directly 
interpreted by the pdp.

 

Schema:

<xs:element name="CombinerParameters" 
type="xacml:CombinerParametersType"/>
<xs:complexType 
name="CombinerParametersType">
<xs:sequence>
<xs:element 
ref="xacml:CombinerParameter" minOccurs="0" 
maxOccurs="unbounded"/>
</xs:sequence>
</xs:complexType>
<!-- -->
<xs:element 
name="CombinerParameter" 
type="xacml:CombinerParameterType"/>
<xs:complexType 
name="CombinerParameterType">
<xs:sequence>
<xs:any 
namespace="##any" processContents="lax" minOccurs="0" 
maxOccurs="unbounded"/>
</xs:sequence>
<xs:attribute name="ParameterName" type="string" 
use="required"/>
</xs:complexType>

 

Simon