RE: Schemas with choice groups replacing substitution groups

["Eve L. Maler" <eve.maler@sun.com>]

I can't see choice groups + substitution groups causing any problems that 
the individual pieces don't already have, except that it might be a bit 
confusing for schema-reading humans to follow.  I'm not familiar with PSTC 
at all, but could this be a case for model groups (i.e., using a model 
group to represent the choice group and allow it to be reused)?

         Eve

At 07:41 AM 9/28/01 -0700, Hallam-Baker, Phillip wrote:
>Bad form to follow up my own post I guess but..
>
>One of the issues that I have been asked to look at recently has been PSTC,
>the provisioning interface also bing developed by OASIS.
>
>Jeff Hodges has been making the undubitably correct point that PSTC should
>use SAML for access control.
>
>However I believe we need to go somewhat further, in particular PSTC should
>re-use SAML assertion or possibly statement elements. This would then allow
>a complete interoperable assertion based access control mechanism where the
>SAML and XACML assertions are initially created using PSTC.
>
>
>This brings us back to substitution groups(!).
>
>The choice groups we have just defined ensure that substitution group
>crippled schema validators do the right thing. Should we add the
>substitution group declarators back in however so that extensions that build
>arround the statement or assertion element don't have to replicate our
>choice groups to ensure that SAML elements can be used???
>
>
>What I am thinking is that PSTC might use is an element of the form:
>
><Provision>
>    <AttributeStatement>
>       <...Whatever...>
>
>Would choice groups + substitution groups cause problems???
>
>
>                 Phill
>
>
>Phillip Hallam-Baker FBCS C.Eng.
>Principal Scientist
>VeriSign Inc.
>pbaker@verisign.com
>781 245 6996 x227
>
>
> > -----Original Message-----
> > From: Hallam-Baker, Phillip [mailto:pbaker@verisign.com]
> > Sent: Thursday, September 27, 2001 5:26 PM
> > To: security-services@lists.oasis-open.org
> > Subject: Schemas with choice groups replacing substitution groups
> >
> >
> > All,
> >
> >       Attached are the schemas with the choice groups replacing the
> > substitution groups.
> >
> >       I introduced extra elements for subject statement and
> > query so that
> > extension schemas can key of them with an xsi:type duwinsky
> > and give maximum
> > info to the other application.
> >
> >               Phill
> >
> > Phillip Hallam-Baker FBCS C.Eng.
> > Principal Scientist
> > VeriSign Inc.
> > pbaker@verisign.com
> > 781 245 6996 x227
> >
> >
> >
>

--
Eve Maler                                    +1 781 442 3190
Sun Microsystems XML Technology Center   eve.maler @ sun.com