Re: [xacml-users] Differences between XACML v1.x and v2.0

[Seth Proctor <Seth.Proctor@Sun.COM>]

On Mon, 2004-10-25 at 10:13, Ravi wrote:
> I am working on a project requiring the use of XACML
> as the access control language. To begin with, I need
> to investigate the differences between XACML v1.x and
> v2.0. I could not find any material on this when I
> searched the web. Could anyone give me pointers on
> this issue?

Hi Ravi. To my knowledge, there is no such writeup yet. I've been
working on an informal description, as have a few others like Diego (I
think) and some TC folks. I hope that we'll eventually find the time to
pool our notes and writeup something useful. In the meantime, feel free
to send your questions here.

In a nutshell, not too many significant changes happened. There is a new
VariableDefinition system, Combining Algorithms can be parameterized,
and Versioning is available to constrain References. There are also some
small tweaks to the syntax to make things a little tighter, and a few
clarifications. On the whole, however, the semantics are largely the
same, as are (arguably) the most important components. Hope this helps.


seth