Re: [xacml-users] Info on the Hl7 Permissions

David and All,

The example messages/document needs to be updated.  The correct prefix value should be urn:oasis:names:tc:xspa:1.0:subject:hl7:permission.  As we have discussed within the TC and IHE XUA++ this is one of the attributes that are candidates for representing as a triple in future release of standard.

Duane

On Fri, Oct 15, 2010 at 8:37 AM, Staggs, David (SAIC) <> wrote:

Bill

Thanks, I typically don't follow the xacml-users list so I appreciate

your note.  Duane and I will take a look at the thread.

Regards,

David

David Staggs, JD, CISSP (SAIC)

Veterans Health Administration

Chief Health Informatics Office

Standards and Interoperability

Office: 858 433 1473

-----Original Message-----

From: Bill Parducci [mailto:]

Sent: Friday, October 15, 2010 8:43 AM

To: Staggs, David (SAIC)

Subject: Fwd: [xacml-users] Info on the Hl7 Permissions

You following this thread? Looks like an opportunity for enhancement :)

b

Begin forwarded message:

> From: Ludwig Seitz <>

> Date: October 14, 2010 11:07:19 PM PDT

> To: "" <>

> Cc: 

> Subject: Re: [xacml-users] Info on the Hl7 Permissions

>

>  wrote:

>> Hi,

>> Also mine, but in the samples there are written something like:

>>

<AttributeValue>urn:oasis:names:tc:xspa:1.0:hl7:prd-003</AttributeValue>

>>

<AttributeValue>urn:oasis:names:tc:xspa:1.0:hl7:prd-005</AttributeValue>

>>

<AttributeValue>urn:oasis:names:tc:xspa:1.0:hl7:prd-006</AttributeValue>

>>

<AttributeValue>urn:oasis:names:tc:xspa:1.0:hl7:prd-009</AttributeValue>

>>

<AttributeValue>urn:oasis:names:tc:xspa:1.0:hl7:prd-010</AttributeValue>

>>

<AttributeValue>urn:oasis:names:tc:xspa:1.0:hl7:prd-012</AttributeValue>

>>

<AttributeValue>urn:oasis:names:tc:xspa:1.0:hl7:prd-017</AttributeValue>

>> (see [1], line 135 and following). And this sample is wrong in my

opinion.

>

> Ok I wasn't aware of this document (I just read the profile). Since

the same persons wrote the examples and the profile I guess the sample

isn't wrong, it's just that the profile is a bit vague on this point.

>

> It appears the XSPA TC intended that the AttributeId would indeed be

> "urn:oasis:names:tc:xspa:1.0:subject:hl7:permission" however one

should also prefix HL7 permission value with

"urn:oasis:names:tc:xspa:1.0:hl7:" to form the attribute value.

>

> You might want to contact the XSPA TC () to

get a clarification.

>

> Regards,

>

> Ludwig

>

> --

> Ludwig Seitz, PhD             |   Axiomatics AB

> Training & Development        |   Electrum 223

> Phone: +46 (0)760 44 22 91    |   S-164 40 Kista, Sweden

> Mail:    |

>

>

> ---------------------------------------------------------------------

> To unsubscribe, e-mail: 

> For additional commands, e-mail: 

>