OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

xacml-comment message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


Subject: [xacml-comment] Environment attributes


I'm unclear about the use of the time based context attributes, namely

Urn:oasis:names:tc:xacml:1.0:environment:current-time
Urn:oasis:names:tc:xacml:1.0:environment:current-date, and 
Urn:oasis:names:tc:xacml:1.0:environment:current-dateTime

Section 10.3.5 of the specification states that 'The value for these
attributes MUST be provided by the PDP', wheras  Appendix B8 states that
'When used, they SHALL appear within the <Resource> element of the
request context.'

Looking at tests AAA016-IIA021, it appears that the expected usage is
that the values may or may not be present in the request context, but if
they are not present then values must be supplied by the PDP. Also, when
values are being provided in the context requests of these tests, they
are appearing in the <Environment> element, not the <Resource> element.

Which, if any, of these is correct?

Cheers,
Tony


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


Powered by eList eXpress LLC