Next in thread → Next in month →

Re: [xacml] Groups - Changes Since XACML 1.0(xacml_1.x_2.0_diffs_draft.doc) uploaded

From
Anne Anderson <>
Date
2005-06-23T18:51:00+00:00
ID
Thread
Re: [xacml] Groups - Changes Since XACML 1.0(xacml_1.x_2.0_diffs_draft.doc) uploaded
MHonArc v2.5.0b2 -->

















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: Re: [xacml] Groups - Changes Since XACML 1.0(xacml_1.x_2.0_diffs_draft.doc) uploaded




From: Anne Anderson <>
To: Daniel Engovatov <>
Date: Thu, 23 Jun 2005 14:51:22 -0400






Daniel,

The DataType "xpath-expression" is defined in the "Hierarchical resource
profile of XACML v2.0", but it is not in the XACML core specification.
The profile references XPath Version 1.0.

Could you clarify what you mean by "policy recombination algorithms"?
Is this just another term for "policy combining algorithms"?  Could you
give a concrete example of how XQuery would be used to express something
like Deny-Overrides?

Daniel Engovatov wrote:
>>7. Datatypes: there is no "xpath-expression" datatype.
> 
> 
> I suggest that depending on the timeline for XACML 3.0 we may redefine
> those types until Xpath2.0/XQuery reaches W3C recommendation phase.  It
> should enter candidate recommendation status on July meeting.
> 
> Many popular Xpath implementations are already 2.0.
> 
> That would be a good opportunity for us to revisit binding between
> Xpath/XQuery data model to XACML context anyway.
> 
> Other potential use for this standard is that XQuery is a rather natural
> language to use to express policy recombination algorithms - using XML
> representation for the rule evaluation results.  Standardizing on a
> language for recombination algorithms may make them more interoperable
> and easier to extend.
> 
> Daniel;
> 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  You may a link to this group and all your TCs in OASIS
> at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 
> 

-- 
Anne H. Anderson             Email: 
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692
Next in thread → Next in month →