RE: Assertion Element

["Hallam-Baker, Phillip" <pbaker@verisign.com>]

Bob,

	The second set of diagrams I sent out has the notbefore/notafter in
as attributes on the <Conditions> element.

	I agree with Prateek about the schema being definitive. However if
people find bugs in the diagrams it is very important they raise them since
diagrams are going to shape the discussion (hence my reluctance to draw them
till the schema was well advanced).

	I will be sending out a third set of viso today that includes the
protocol schema.

		Phill

Phillip Hallam-Baker FBCS C.Eng.
Principal Scientist
VeriSign Inc.
pbaker@verisign.com
781 245 6996 x227


> -----Original Message-----
> From: George Robert Blakley III [mailto:blakley@us.tivoli.com]
> Sent: Friday, August 24, 2001 2:12 PM
> To: Hal Lockhart
> Cc: 'security-services@lists.oasis-open.org'
> Subject: Assertion Element
> 
> 
> I was looking at Phill's diagrams yesterday evening and two 
> things jumped
> out at me.
> 
> The first was that I couldn't find the validity interval
> (NotBefore/NotAfter) anywhere.  I thought these
> were in the base schema... but I can't remember for sure.  
> The second was
> that the AttributeAssertionType
> has a simple "Attribute" member... should this be called out as a
> Type/Value or Name/Value structure?
> 
> 
> --bob
> 
> Bob Blakley (email: blakley@us.tivoli.com   phone: +1 512 436 1564)
> Chief Scientist, Security and Privacy, Tivoli Systems, Inc.
> 
> 
> Hal Lockhart <hal.lockhart@entegrity.com> on 08/24/2001 12:44:43 PM
> 
> Please respond to Hal Lockhart <hal.lockhart@entegrity.com>
> 
> To:   "'security-services@lists.oasis-open.org'"
>       <security-services@lists.oasis-open.org>
> cc:
> Subject:  Object Element
> 
> 
> 
> Someone else may have already spotted this, but more cleanup 
> is required
> around Object in core 0.15.
> 
> QueryAbstractType still refers to Object, but in 
> Authorization Decision
> Assertion, Object has been eliminated and Resource and Action are now
> independant elements.
> 
> Hal
> 
> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>
> 
> 
> 
> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>
>

Phillip Hallam-Baker (E-mail).vcf