Public Comment

[comment-form@oasis-open.org]

Comment from: diegog@lagash.com

Hi, I'm working in an implementation of the 1.0 version in .Net and my code is almost finished except for the following issues:
 - In Hierarchical resources seems the PDP must determine wether the resource in the policy is a Children or a Descendant of the resource in the context document. But there's no specification about how to determine such relationship. 

Does anybody knows how to perform such function?

I'm using the IIIC002 test.

I've executed the "jiffyxacml-1.0.0" and the test fails with this Response:
<Response
  xmlns='urn:oasis:names:tc:xacml:1.0:context'
  xsi:schemaLocation='urn:oasis:names:tc:xacml:1.0:context
    http://www.oasis-open.org/tc/xacml/1.0/sc-xacml-schema-context-01.xsd'>
</Response>

Sun's iImplementation returns:
<Response>
  <Result>
    <Decision>Indeterminate</Decision>
    <Status>
      <StatusCode Value="urn:oasis:names:tc:xacml:1.0:status:processing-error"/>

      <StatusMessage>Couldn't find any resources to work on.</StatusMessage>
    </Status>
  </Result>
</Response>

 - I do not understand clearly how to handle the Missing Attribute scenario. During the execution of the test IID006 some rules uses attributes that are not defined and my PDP was returning -missing-attribute, but the result in the test is -ok. So I can't understant when the PDP must return such status code.

Diego Gonzalez
Lagash Systems SA