RE: [xacml] Question about Anonymous Access Subject?

[Daniel Engovatov <dengovatov@crosslogix.com>]

..And to write rules on anonymous subject I presume one has to use
<anysubject> for target? Right?
Does missed subject have applicable rules written on <anysubject> ?

Daniel;

-----Original Message-----
From: Anne Anderson
To: XACML TC
Sent: 10/11/02 9:04 AM
Subject: Re: [xacml] Question about Anonymous Access Subject?

On 11 October, Hal Lockhart writes: [xacml] Question about Anonymous
Access Subject?
 > Is there a cannonical way to represent an anonymous access subject in
the
 > Request Context? This seems to me to be an extremely common case that
should
 > be described in the spec. (My preference would be to leave out the
access
 > subject entirely, but I see that it is mandatory)

Yes, there is a canonical way.  The sequence of Attributes under
<Subject> is minOccurs=0, so you can have a Request Context in
which the one <Subject> element has no Attributes (such as no
subject-id).

Anne
-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692


----------------------------------------------------------------
To subscribe or unsubscribe from this elist use the subscription
manager: <http://lists.oasis-open.org/ob/adm.pl>