RE: [xacml-dev] Xacml 3.0 Element <PolicyIdentifierList> Clarification

[Hal Lockhart <hal.lockhart@oracle.com>]

I believe an XML example of this would look something like this:

<PolicyIdentifierList>

  <PolicySetIdReference Version="2.3">
    urn:oasis:names:tc:xacml:3.0:example:samplepolicysetid
  </PolicySetIdReference>

  <PolicyIdReference Version="1.1">
    urn:oasis:names:tc:xacml:3.0:example:samplepolicyid
  </PolicyIdReference>

  <PolicyIdReference Version="1.0.2">
    http://www.example.com/adifferentformatpolicyid
  </PolicyIdReference>

</PolicyIdentifierList>


Hal

> -----Original Message-----
> From: Hal Lockhart
> Sent: Thursday, September 19, 2013 4:21 PM
> To: DRAGOSH, PAMELA L (PAM); xacml-dev@lists.oasis-open.org
> Subject: RE: [xacml-dev] Xacml 3.0 Element <PolicyIdentifierList>
> Clarification
> 
> The PolicyIdentifierList is a list of zero or more PolicyIdReference
> and PolicySetIdReference elements. These elements are of type
> IdReferenceType which basically contains a policy or policy set ID and
> attributes containing the version.
> 
> BTW, the Version XML Attribute is not a number but a constrained
> string. (In the form of a.b.c)
> 
> Hal
> 
> > -----Original Message-----
> > From: DRAGOSH, PAMELA L (PAM) [mailto:pdragosh@research.att.com]
> > Sent: Thursday, September 19, 2013 2:40 PM
> > To: xacml-dev@lists.oasis-open.org
> > Subject: [xacml-dev] Xacml 3.0 Element <PolicyIdentifierList>
> > Clarification
> >
> > Hi,
> >
> > I'm hoping to get more clarification with regards to the
> > PolicyIdentifierList element that is contained in the Response, I.e.
> > Section 5.49.
> >
> > The specification says the following:
> > <PolicyIdReference> [Any number]
> >
> > The identifier and version of a policy which was applicable to the
> > request. See section 5.11. The <PolicyIdReference> element MUST use
> > the Version attribute to specify the version and MUST NOT use the
> > LatestVersion orEarliestVersion attributes.
> > <PolicySetIdReference> [Any number]
> >
> > The identifier and version of a policy set which was applicable to
> the
> > request. See section 5.10. The <PolicySetIdReference> element MUST
> use
> > the Version attribute to specify the version and MUST NOT use
> > theLatestVersion or EarliestVersion attributes.
> >
> > So BOTH the identifier and version of a policy is supposed to be what
> > is contained within the element. However, the specification indicates
> > [Any number] as the type. The policy identifier is a URI while the
> > version is [Any number]. So not only is there a mixture of two
> > different data types, there also is nothing indicated as how one
> > parses out the identifier and version. Should we assume that the
> > contents starts with a URI for the policy id and ends with a [Any
> > number] for the version. Or am I missing something from the
> documentation?
> >
> > Pam
> >
> > Pamela L. Dragosh
> > PMTS - Research
> > 180 Park Ave - D173
> > Florham Park, NJ 07932
> > 973-360-8504
> > pdragosh@research.att.com
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: xacml-dev-unsubscribe@lists.oasis-open.org
> > For additional commands, e-mail: xacml-dev-help@lists.oasis-open.org
> >
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: xacml-dev-unsubscribe@lists.oasis-open.org
> For additional commands, e-mail: xacml-dev-help@lists.oasis-open.org
>