Re: [xacml-users] Hierarchical resources policy and request file

[dhirendra sharma <dhirendra_sh@yahoo.com>]

Hi Seth,

Thanks !
I had missed the point - "AttributeDesignators always
return bags" which you pointed out in your note below
along 
with incorrect datatype.

Regards,
Dhirendra Sharma


--- Seth Proctor <Seth.Proctor@sun.com> wrote:

> 
> Hi Dhirendra. As Argyn requested, please take
> SunXACML-specific  
> questions to its sourceforge list. As to the general
> question you're  
> asking:
> 
> > 	   <Condition>
> > 		     <Apply
> FunctionId="urn:oasis:names:tc:xacml: 
> > 1.0:function:anyURI-is-in">
> > 		
> > 			<SubjectAttributeDesignator
> > 				AttributeId="subject-company"
> > 				DataType="xs:anyURI"/>
> > 				
> > 		         <ResourceAttributeDesignator
> > 			
>
AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id"
> > 				DataType="xs:anyURI"/>
> > 		     </Apply>
> > 	   </Condition>
> 
> As I have said twice before, the problem you're
> having is nothing to  
> do with the implementation. Your policy is invalid.
> the *-is-in  
> functions take a base type and a bag. In this case,
> it's the anyURI- 
> is-in funcion, which takes a URI and a bag of URIs. 
> 
> AttributeDesignators always return bags, so you're
> passing the  
> function two bags which is, as the exception says,
> invalid input.
> 
> Also, I don't see where you define the "xs"
> namespace. This means  
> that you're also specifying an invalid datatype.
> Look in the XACML  
> specification for the full namespaces and
> identifiers used for  
> standard datatypes.
> 
> 
> seth
> 
>
---------------------------------------------------------------------
> This publicly archived list supports open discussion
> on using the 
> XACML OASIS Standard. To minimize spam in the
> archives, you 
> must subscribe before posting.
> 
> [Un]Subscribe/change address:
> http://www.oasis-open.org/mlmanage/
> Alternately, using email:
> list-[un]subscribe@lists.oasis-open.org
> List archives:
> http://lists.oasis-open.org/archives/xacml-users/
> Committee homepage:
> http://www.oasis-open.org/committees/xacml/
> List Guidelines:
> http://www.oasis-open.org/maillists/guidelines.php
> Join OASIS: http://www.oasis-open.org/join/
> 
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com