RE: [xacml] Structured names]

[Anne Anderson <Anne.Anderson@Sun.com>]

My problem with Bill's suggestion is that his matching syntax is
not standard.  We would need to spell out all sorts of things
about e-mail names to fully specify "our" matching algorithm.  I
think the way I specified "rfc822Name-match" is good, and makes
use of all the existing standards.

I think "*-equal" should be understood as matching just the one
name being referenced.  I think "*-match" can match a hierarchy.
We should define a "*-match" function for any hierarchical
subject name type.  We have done this for rfc822Name, x500Name,
and even for xs:string (via regexp).  Are there other
hierarchical name types we are concerned about at this point?

Anne
-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692