OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

xacml-comment message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: Incomplete definition of the ipAddress-is-in and dnsName-is-in functions



Section 10.2.8 of the XACML 3.0 core specification (CS-01) lists
urn:oasis:names:tc:xacml:2.0:function:ipAddress-is-in and
urn:oasis:names:tc:xacml:2.0:function:dnsName-is-in as mandatory
to implement functions. The type-is-in functions are described in
appendix A.3.10 in terms of a corresponding
urn:oasis:names:tc:xacml:x.x:function:type-equal function, however
the necessary ipAddress-equal and dnsName-equal functions have not
been defined.

Judging from the archives there is no intention of defining the
ipAddress-equal and dnsName-equal functions, in which case the
ipAddress-is-in and dnsName-is-in function identifiers should be
removed.

Regards,
Steven


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]