Re: [xacml] [Fwd: [xacml-users] SAML statement extension for XACML]

MHonArc v2.5.0b2 -->


















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: Re: [xacml] [Fwd: [xacml-users] SAML statement extension for XACML]




From: Anne Anderson <>
Date: Mon, 26 Sep 2005 14:28:12 -0400






Hi Argyn,

It appears that a substitionGroup is the only XML mechanism that will
allow us to extend the SAML schema with two new "saml:Statement" types
(for XACMLAuthzDecisionStatement and XACMLPolicyStatement) that can then
be used as one of the choices for a "saml:Assertion".  SAML defines an
"AbstractStatementType" with "abstract" = "true", but you can't include
a type as one of the elements in a "choice".

Do you have an alternative way to accomplish this?

Anne

Argyn wrote On 09/26/05 14:18,:
> Anne
> 
> personally, I don't like substitution groups in general. I was thinking
> about somehow getting rid of it from xacml schema.
> 
> thanks,
> argyn

-- 
Anne H. Anderson             Email: 
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692