[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: RE: [xacml-dev] XACML 2
Maybe I mean samples, not tests. When I first tried to implement RBAC, I took samples from the document, and they didn't work. It took some time to make them loadable and work with SunXACML. I thought that having those samples as policy XML docs would help implementors. Argyn > -----Original Message----- > From: Anne Anderson [mailto:Anne.Anderson@Sun.COM] > Sent: Wednesday, September 29, 2004 10:00 AM > To: Kuketayev, Argyn > Cc: xacml-dev@lists.oasis-open.org > Subject: RE: [xacml-dev] XACML 2 > > > There are no plans. The RBAC profile has not yet been > approved as a CD. > > It would be a test of how you implement your policy storage > and retrieval mechanism, since the RBAC profile requires no > changes or functional extensions to XACML. It is strictly a > "profile" or paradigm for XACML usage. > > Can you suggest a conformance test that would be useful? The > only thing I can think of is to pass in a Request containing > a role attribute, having two Role PolicySets - one that > applies and one that doesn't - and two Permission PolicySets > - one for each role. The test would be verifying that only > the applicable Permission PolicySet was applied. That is all > standard XACML, so I don't think it is very useful. > > Anne > > On 29 September, Kuketayev, Argyn writes: RE: [xacml-dev] > XACML 2 > From: "Kuketayev, Argyn" > <argyn_kuketayev@fanniemae.com> > To: Anne.Anderson@Sun.COM, > xacml-dev@lists.oasis-open.org > Subject: RE: [xacml-dev] > XACML 2 > Date: Wed, 29 Sep 2004 09:38:03 -0400 > > > Are there any plans to have conformance tests or samples > for RBAC > profile?\ > Argyn > > > > -----Original Message----- > > > From: Anne Anderson [mailto:Anne.Anderson@Sun.COM] > > > Sent: Wednesday, September 29, 2004 9:31 AM > > > To: xacml-dev@lists.oasis-open.org > > > Subject: RE: [xacml-dev] XACML 2 > > > > > > > > > On 28 September, Diego M. Gonzalez writes: RE: [xacml-dev] > > > XACML 2 > I have finished the code that loads the policies > > > and makes > difference for both versions. But I'll like to > > > start with a > TDD environment for which I have to create > > > some conformance > tests with the new schema and > namespaces. > > > > > Have you started with the conformance tests? Do you want > > > to > use a common place to store them so any implementor can > > > get > the tests, and provide feedback about them? > > > > > > Diego, > > > > > > The XACML TC has not discussed conformance tests for XACML > > > 2.0. I have asked the chairs to put the topic on our agenda. > > > Sun volunteered to do CTs for XACML 1.0, and IBM for XACML > > > 1.1, but I don't know if IBM is interested in doing them for > > > XACML 2.0. There is no requirement that a spec have CTs, but > > > it certainly is valuable. > > > > > > Anne > > > -- > > > Anne H. Anderson Email: Anne.Anderson@Sun.COM > > > Sun Microsystems Laboratories > > > 1 Network Drive,UBUR02-311 Tel: 781/442-0928 > > > Burlington, MA 01803-0902 USA Fax: 781/442-1692 > > > > > > > > -- > Anne H. Anderson Email: Anne.Anderson@Sun.COM > Sun Microsystems Laboratories > 1 Network Drive,UBUR02-311 Tel: 781/442-0928 > Burlington, MA 01803-0902 USA Fax: 781/442-1692 > >
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]