Re: [xacml-comment] IIC165

[Anne Anderson <Anne.Anderson@Sun.com>]

John Merrells,

We caught this ourselves just yesterday.  I agree, and the test
has been changed.  Modified test is attached.  Note that a
complete zip file of updated, corrected tests will be sent out
tomorrow.

Anne

On 25 November, John Merrells writes: [xacml-comment] IIC165
 > From: John Merrells <merrells@jiffysoftware.com>
 > To: xacml-comment <xacml-comment@lists.oasis-open.org>
 > Subject: [xacml-comment] IIC165
 > Date: Mon, 25 Nov 2002 18:01:33 -0800
 > 
 > 
 > Test C165 tests all-of using a regular expression match. The mask in the
 > policy is ' *This  is .* IT!  ', and the attribute values in the request 
 > are
 > '   This  is IT!  ', and 'This  is also IT!  '. The first value does not 
 > match
 > the mask. The problem is that the mask expects there to be at least two
 > spaces between 'is' and 'IT!'.
 > 
 > John
 > 
 > 
 > 
 > 
 > ----------------------------------------------------------------
 > To subscribe or unsubscribe from this elist use the subscription
 > manager: <http://lists.oasis-open.org/ob/adm.pl>
 > 

-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692

<?xml version="1.0" encoding="UTF-8"?>
<Policy
      xmlns="urn:oasis:names:tc:xacml:1.0:policy"
      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance";
      xsi:schemaLocation="urn:oasis:names:tc:xacml:1.0:policy
        cs-xacml-schema-policy-01.xsd"
      PolicyId="urn:oasis:names:tc:xacml:1.0:conformance-test:IIC165:policy"
      RuleCombiningAlgId="urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides">
    <Description>
        Policy for Conformance Test IIC165.
    </Description>
    <Target>
        <Subjects>
            <AnySubject/>
        </Subjects>
        <Resources>
            <AnyResource/>
        </Resources>
        <Actions>
            <AnyAction/>
        </Actions>
    </Target>
    <Rule
          RuleId="urn:oasis:names:tc:xacml:1.0:conformance-test:IIC165:rule"
          Effect="Permit">
        <Condition FunctionId="urn:oasis:names:tc:xacml:1.0:function:all-of">
            <Function FunctionId="urn:oasis:names:tc:xacml:1.0:function:regexp-string-match"/>
            <AttributeValue
                  DataType="http://www.w3.org/2001/XMLSchema#string";> *This  is.* IT!  </AttributeValue>
            <SubjectAttributeDesignator
                  AttributeId="urn:oasis:names:tc:xacml:1.0:conformance-test:test-attr"
                  DataType="http://www.w3.org/2001/XMLSchema#string"/>
        </Condition>
    </Rule>
</Policy>