[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: AttributeSelector usage
The spec (2.0) states the following for <AttributeSelector>: Each node selected by the specified XPath expression MUST be either a text node, an attribute node, a processing instruction node or a comment node. The string representation of the value of each node MUST be converted to an attribute value of the specified data-type, and the result of the AttributeSelector is the bag of the attribute values generated from all the selected nodes. Does that mean I cannot have something like this? <Request...> <Subject> <Attribute AttributeId="myattrid1" DataType="mydatatype1"> <AttributeValue> <test:MyElementName> blah blah </test:MyElementName> </AttributeValue> </Attribute> </Subject> .... </Request> And then in the Policy I do something like: <Policy...> .... <Apply FunctionId="myfunc1"> <AttributeSelector RequestContextPath="//Subject/Attribute[@AttributeId="myattrid1"] DataType="mydatatype1"/> .... </Apply> .... </Policy> This seems counter intutive to me in that the schema is open enough to allow embedding my own structure into the AttributeValue but I cannot leverage it in a meaningful manner in the AttributeSelector. Also I am trying to understand how the ability to plug in an arbitraty structure into <ResourceContent> works given the limitations on the AttributeSelector? Also the spec states the following: DataType [Required] The data-type of the contents of the <xacml-context:AttributeValue> element. This SHALL be either a primitive type defined by the XACML 2.0 specification or a type (primitive or structured) defined in a namespace declared in the <xacml-context> element. So what would be the value of defining my own (complex) datatypes in such a scenario? Am I missing something? Also any inputs on how one can overcome this limitation would be greatly appreciated. thanks, prakash
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]