[xacml] [CR] AttributeSelectorIndirect

[Michiharu Kudoh <KUDO@jp.ibm.com>]

Based on the discussion on Monday call, Simon and I agreed to changing the
schema to support an AttributeSelectorIndirect element to retrieve a XPath
expression from the context. I wonder whether the name of this element is
appropriate or not.

<xs:complexType name="AttributeSelectorBaseType">
  <xs:element ref="xacml:XPathNamespace" minOccurs="0" maxOccurs
="unbounded"/>
  <xs:attribute name="DataType" type="xs:anyURI" use="optional"/>
  <xs:attribute name="XPathVersion" type="xs:anyURI" use="optional" default
="http://www.w3.org/TR/1999/Rec-xpath-19991116"/>
</xs:complexType>

<xs:complexType name="AttributeSelectorType">
  <xs:complexContent>
    <xs:extension base="AttributeSelectorBaseType">
      <xs:attribute name="RequestContextPath" type="xs:string" use
="required"/>
    </xs:extension>
  </xs:complexContent>
</xs:complexType>

<xs:complexType name="AttributeSelectorIndirectType">
  <xs:extension base="AttributeSelectorBaseType">
    <xs:choice>
      <xs:element ref="xacml:SubjectAttributeDesignator"/>
      <xs:element ref="xacml:ResourceAttributeDesignator"/>
      <xs:element ref="xacml:ActionAttributeDesignator"/>
      <xs:element ref="xacml:EnvironmentAttributeDesignator"/>
    </xs:choice>
  </xs:extension>
</xs:complexType>

<xs:element name="AttributeSelector" type="AttributeSelectorType"/>
<xs:element name="AttributeSelectorIndirect" type
="AttributeSelectorIndirectType"/>

<xs:element name="XPathNamespace" type="xacml:XPathNamespaceType"
substitutionGroup="xacml:AbstractDefaults"/>
<xs:complexType name="XPathNamespaceType">
  <xs:attribute name="NamespaceURI" type="xs:anyURI"/>
  <xs:attribute name="Prefix" type="xs:string" use="optional"/>
</xs:complexType>


Sample text for this element:

5.28. Element <AttributeSelectorIndirect>

The <AttributeSelectorIndirect> element is a free-form pointing device into
the <xacml-context:Request> element using an attribute designator. The
actual xpath expression is retrieved from the context pointed by that
attribute designator. Other than that, the semantics is the same with
<AttributeSelector> element. Support for the <AttributeSelectorIndirect>
element is OPTIONAL.

The <AttributeSelectorIndirect> element is of AttributeSelectorIndirectType
complex type.
The <AttributeSelectorIndirect> element has either one of the following
elements:

SubjectAttributeDesignator
ResourceAttributeDesignator
ActionAttributeDesignator
EnvironmentAttributeDesignator

Michiharu

IBM Tokyo Research Laboratory, Internet Technology
Tel. +81 (46) 215-4642   Fax +81 (46) 273-7428