RE: [xacml-comment] Public Comment

[Anne Anderson <Anne.Anderson@Sun.COM>]

I think Diego's response is excellent.  Thank you!

The "XACML Profile for Multiple Resource Requests" that I will be
posting soon (based on Section 7.[A] of the Hierarchical
Resources draft attached to
http://lists.oasis-open.org/archives/xacml/200405/msg00104.html)
will clarify this further.

Note also that the XACML Profile for SAML provides a way to link
Attributes of the original Request to the Response.  This would
include the action-id in most cases (the spec says when Request
Attributes are returned that only those Attributes that were used
in the evaluation MUST be included, although others MAY be
included).

Anne

On 28 May, Diego M. Gonzalez writes: RE: [xacml-comment] Public Comment
 > In my understanding the you will have a single Resource element if you
 > ask for a single resource in the Request. You can ask for multiple
 > resources using hierarchical resources. If you ask for a single resource
 > there's no need to say what is the resource that you have been granted
 > to, but if you ask for multiple resources you will receive a single
 > Result element for each Resource requested with the ResourceId specified
 > and the Decission for each one.
 > 
 > As you can request access over a resource for a single Action, the
 > action is implicit in the "context", is the same ActionId placed in the
 > Request document so there's no need to place it in the response.
 > 
 > This is what you asked for?
 > 
 > Thanks,
 > Diego Gonzalez
 > Lagash Systems SA
 > 
 > 
 > -----Original Message-----
 > From: comment-form@oasis-open.org [mailto:comment-form@oasis-open.org] 
 > Sent: Thursday, May 27, 2004 10:21 PM
 > To: xacml-comment@lists.oasis-open.org
 > Subject: [xacml-comment] Public Comment
 > 
 > Comment from: kiran@objectedge.com
 > 
 > As per xacml specification, Response element contains one or more Result
 > element. And result element contains ResourceId (as attribute v/s
 > element as in Request!), Decision, Status and Obligations. But it
 > doesn't contain Action? Also ResourceId is not explicit attribute of
 > Resource! 
 > 
 > Thanks,
 > Kiran
 > 
 > 
 > To unsubscribe from this list, send a post to
 > xacml-comment-unsubscribe@lists.oasis-open.org, or visit
 > http://www.oasis-open.org/mlmanage/.
 > 
 > 
 > 
 > 
 > To unsubscribe from this list, send a post to xacml-comment-unsubscribe@lists.oasis-open.org, or visit http://www.oasis-open.org/mlmanage/.
 > 

-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692