Groups - XACML v3.0 Related and Nested Entities Profile Version 1.0 uploaded

Submitter's message

        This is the initial draft for the Related and Nested Entities Profile - my response to the "Attributes of Relations" email thread. I changed from "Embedded" to "Nested" in the title because it better suggests the idea that entities can be embedded in other entities to any depth. A nested entity is what I have previously called a compound attribute. As well as the ForAny and ForAll expressions that I have discussed on the mailing list I have defined a Select _expression_ as a convenience to policy writers who like to think in SQL terms. The examples go beyond simply addressing the "Attributes of Relations" concerns.
        

-- Dr. Steven Legg
        
    

    
        Document Name: XACML v3.0 Related and Nested Entities Profile Version 1.0

        
        Description

        It is not unusual for access control policy to be dependent on attributes

that are not naturally properties of the access subject or resource, but

rather are properties of entities that are related to the access subject or

resource. This profile defines the means to reference such attributes from

within XACML policies for processing by a policy decision point.        

        Download Latest Revision

        Public Download Link
        
        Submitter: Dr. Steven Legg

                Group: OASIS eXtensible Access Control Markup Language (XACML) TC

        Folder: Specifications and Working Drafts

        Date submitted: 2013-10-21 23:17:29