RE: [xacml-comment] Public Comment

["diego gonzalez" <diegog@lagash.com>]

Hi, 

I think this question can be completed with the following comment. In
the section 7.5 there is a list of functions that meet the requirements
to be used in a Match operation. Those functions are prefixed with
"urn:oasis:names:tc:xacml:2.0:function", it means all the funtions will
change its prefix in 2.0 or this is a typo error?

And also raises the following question about the new functions: There
will be new "match-related" functions for the new data types?

urn:oasis:names:tc:xacml:2.0:function:-dnsName-equal
urn:oasis:names:tc:xacml:2.0:function:-dnsName-greater-than
urn:oasis:names:tc:xacml:2.0:function:-dnsName-greater-than-or-equal
urn:oasis:names:tc:xacml:2.0:function:-dnsName-less-than
urn:oasis:names:tc:xacml:2.0:function:-dnsName-less-than-or-equal
urn:oasis:names:tc:xacml:2.0:function:-dnsName-match

urn:oasis:names:tc:xacml:2.0:function:-ipAddress-equal
urn:oasis:names:tc:xacml:2.0:function:-ipAddress-greater-than
urn:oasis:names:tc:xacml:2.0:function:-ipAddress-greater-than-or-equal
urn:oasis:names:tc:xacml:2.0:function:-ipAddress-less-than
urn:oasis:names:tc:xacml:2.0:function:-ipAddress-less-than-or-equal
urn:oasis:names:tc:xacml:2.0:function:-ipAddress-match

Thanks,
Diego Gonzalez
Lagash Systems SA

-----Original Message-----
From: comment-form@oasis-open.org [mailto:comment-form@oasis-open.org] 
Sent: Tuesday, November 09, 2004 11:54 PM
To: xacml-comment@lists.oasis-open.org
Subject: [xacml-comment] Public Comment

Comment from: Haruyuki.Kawabe@unisys.co.jp

Following datatypes and functions are introduced since XACML 2.0:
 - dnsName
 - ipAddress
 - regexp-dnsName-match
 - regexp-ipAddress-match
 - regexp-uri-match
They are defined in the namespace
"urn:oasis:names:tc:xacml:1.0:data-type" and
"urn:oasis:names:tc:xacml:1.0:function" respectively.
They should be defined in the XACML 2.0 namecpase
"urn:oasis:names:tc:xacml:2.0" as same as string-concatenate and
uri-string-concatenate.