RE: [xacml] Type-is-in should be a match function

From
Tim Moses <>
Date
2004-07-14T14:20:19+00:00
ID
Thread
RE: [xacml] Type-is-in should be a match function
Seth - But ...

Target can contain a match function, e.g. ResourceMatch, which compares an
attributeValue with a ResourceAttributeDesignator, which is a bag of base
types.

No?

All the best.  Tim.

-----Original Message-----
From: Seth Proctor [mailto:] 
Sent: Wednesday, July 14, 2004 10:17 AM
To: Tim Moses
Cc: 'XACML'
Subject: Re: [xacml] Type-is-in should be a match function



On Wed, 2004-07-14 at 09:16, Tim Moses wrote:
> Colleagues - Section 7.5 lists the xacml functions that qualify as a 
> match function.  I believe type-is-in has the necessary qualifications 
> and should be included in the list.  Any thoughts?  All the best.  
> Tim.

The type-is-in functions cannot be used in a Target's MatchId, since you're
not evaluating over a bag, but between two base types. In fact, none of the
bag functions may be used in a Target match.


seth


To unsubscribe from this mailing list (and be removed from the roster of the
OASIS TC), go to
http://www.oasis-open.org/apps/org/workgroup/xacml/members/leave_workgroup.p
hp.