OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

xacml-dev message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]


Subject: RE: [xacml-dev] RE: [sunxacml-discuss] RE: Use of Xquery with XACML


Totally agree with this. In fact when Xpath is used within the Rules or
Conditions it's implemented as a function. I think there is some
overlaping between RequestContext and the xpath related function,
because both supports searching elements using Xpath, but I don't see
this very confusing. In fact it also allows more information by the time
of processing the policy and also is easy to create context bound xpath.

Regards,
DiegoG

-----Original Message-----
From: Daniel Engovatov [mailto:dengovatov@bea.com] 
Sent: Wednesday, December 08, 2004 5:48 PM
To: Muhammad Masoom Alam; xacml-dev@lists.oasis-open.org
Cc: Seth Proctor; sunxacml-discuss@lists.sourceforge.net
Subject: [xacml-dev] RE: [sunxacml-discuss] RE: Use of Xquery with XACML


If you want to extend XACML functions to use XQuery, you will have to do
it yourself.  There is no direct mapping, as XQuery/XPath data model is
not directly compatible with XACML data model.  This is done on purpose
as XACML Data model is designed to accommodate a broader ranger of data
sources then XML.
If you write a custom function that does XQuery or XLST transformation
to return XACML attribute value to be used in a rule, you can pass the
actual query code as a string literal attribute.  You will also need to
address how do you provide prolog data and XQuery context, but this is
completely outside of XACML implementation.
Daniel;


-----Original Message-----
From: Muhammad Masoom Alam [mailto:Muhammad.alam@uibk.ac.at]
Sent: Wednesday, December 08, 2004 11:14 AM
To: Daniel Engovatov; xacml-dev@lists.oasis-open.org
Cc: Seth Proctor; sunxacml-discuss@lists.sourceforge.net
Subject: Re: [sunxacml-discuss] RE: Use of Xquery with XACML

Dear ,

and if the authorization system(PDP)  itself wants to use Xquery to make
a decision for a resource (XML data / or any resource) , where this
Xquery is going to be stored, how Authorization System is going to
reference this Xquery as currently there is no support for Xquery and
very limited support for Xpath as well.

Regards
Muhammad.




[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]