Jean-Paul,
Thanks for the summary. I might add that for the
AttributeDesignator approach, I did not intend to do substitution
in target <Match> elements. My point is to stay within the
current XACML 3.0 core schema, and avoid any extra processin
steps. Thus it would be a "con" to this approach that any targets
need to be rewritten into conditions using the
on-permit-apply-second algorithm.
Best regards,
Erik
On 2012-10-11 15:39, Jean-Paul Buu-Sao wrote:
Greetings
There has
been an intense and healthy discussion around the syntax for
Policy Templates recently, thanks to Danny Steven and Erik.
I thought that I should summarize the various proposals on
the Wiki:
https://wiki.oasis-open.org/xacml/Policy%20Template%20Syntactic%20Options
Danny, Steven, Erik, please apologize if I
missed on of your points. I still have to double check that
OOI have not forgotten anything against the email thread (I
fact I have, but will correct before today close of business).
Thanks,
Jean-Paul