Re: [security-services] The debut of the Approved Errata document

["Eve L. Maler" <Eve.Maler@Sun.COM>]

I'm finishing up the last few errata editing items.  On E61, in 
reviewing Tom's suggested edit, I was feeling a little uncomfortable 
that it makes such deep edits (something we should avoid when we can 
in errata) for a relatively trivial point, and also I noticed that 
it goes against the introductory sentence in Section 7.1 that says 
"The following sections discuss only elements and types that have 
been specifically designed to support extensibility."

Since it seems we didn't officially approve the wording for E61 yet 
(I couldn't find it in the 16 Jan 2007 notes), I'd like to suggest 
we take another look at this in tomorrow's call.  Here is the 
wording I propose as an alternative -- I will include this in the 
edits I make on a prospective basis, but can change it afterward if 
need be.

"The following SAML protocol *construct*s are intended specifically 
for use as extension points in an extension schema; *the types 
listed* are set to abstract, and are thus usable only as the base of 
a derived type:

• RequestAbstractType
• <SubjectQuery> and SubjectQueryAbstractType"

	Eve

Tom Scavo wrote:
> On 1/14/07, Eve L. Maler <Eve.Maler@sun.com> wrote:
>>
>> - Are edits to Core for E61 acceptable?
> 
> Since SubjectQueryAbstractType is derived from RequestAbstractType, I
> wonder if the latter should be mentioned first.  I offer the following
> rewrite as one possible alternative:
> 
> 7.1.2 Protocol Schema Extension
> 
> The samlp:RequestAbstractType is available for use as an extension
> point in extension schema.  The following SAML protocol element, which
> itself is an extension of samlp:RequestAbstractType, is also available
> for use as an extension point:
> 
> <SubjectQuery> and SubjectQueryAbstractType
> 
> The following SAML protocol elements are derived from
> samlp:SubjectQueryAbstractType and are therefore particularly
> interesting targets for extension:
> 
>  <AuthnQuery> and AuthnQueryType
>  <AttributeQuery> and AttributeQueryType
>  <AuthzDecisionQuery> and AuthzDecisionQueryType
> 
> Likewise the concrete type samlp:StatusResponseType is a possible
> extension point.
> 
>> - Unmade edit to change "tc" to "TC" at lines "1571-1572" in Core:
>>    The problem is that I can't find where to do this!  Can someone
>>    remind me?  (Tom S.?)
> 
> I'm not following you, Eve.  This doesn't have anything to do with E60
> or E61, right?  In any event, I can't find the lines you're referring
> to, either in core original or core amended.
> 
> Tom
> 

-- 
Eve Maler                                         +1 425 947 4522
Technology Director                           eve.maler @ sun.com
CTO Business Alliances group                Sun Microsystems, Inc.