OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

xacml message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


Subject: Re: [xacml] IsPresent semantics



Do we need to put this description somewhere, or can we refer to it as
"QName equality"?


On Tue, 29 Oct 2002, Simon Godik wrote:

> > Q: What about QName equality? See match on DataType.
>
> QName evaluates into expanded name which is a pair: (URI, local_name).
> Expanded name MUST be used in all operations involving DataType attribute of
> the xacml:AttributeDesignator,
> xacml:AttributeSelector, xacml:AttributeValue, and xacml-context:Attribute.
> Two QNames are considered equal iff URI portion of expanded names are equal,
> and local_name portions
> of the expanded names are equal.
>
> Simon
>
> ----- Original Message -----
> From: "Polar Humenn" <polar@syr.edu>
> To: "XACML" <xacml@lists.oasis-open.org>
> Sent: Tuesday, October 29, 2002 10:26 AM
> Subject: [xacml] IsPresent semantics
>
>
> >
> > I'm writing up the semantics for the *IsPresent elements, and I want your
> > immediate feed back for this ResourceAttributeIsPresent text, as the other
> > elements will just probably be a cut and paste of it with the names
> > changed.
> >
> > Note, that this text should also apply to the *AttributeDesignator
> > elements as well, as they are close counterparts.
> >
> > Q: What about QName equality? See match on DataType.
> >
> >
> >
> > 5.1.x Element <ResourceAttributeIsPresent>
> >
> > The <ResourceAttributeIsPresent> element SHALL result in true if the
> > named resource attribute can be located from within the <Resource>
> > element of the <xacml-context:Request> element. A result of true SHALL
> > mean that an <ResourceAttributeDesignator> element for this named
> > attribute will return a bag consisting of at least one attribute value.
> > The MustBePresent attribute governs whether this element returns false
> > or indeterminate in the case of finding no value for the named attribute
> > in the request context. In this case, if the MustBePresent attribute is
> > set to false, which is its default value, this element SHALL result in
> > false. However, for this case, if the MustBePresent attribute is set to
> > true, the expression SHALL result in indeterminate. Regardless of the
> > MustBePresent attribute, if it cannot be determined whether the
> > attribute is present or not present in the request context, or the value
> > of the attribute is unavailable, then the expression SHALL result in
> > indeterminate.
> >
> > A resource attribute SHALL be considered present if at least one
> > attribute exists within the <Resource> in the <xacml-context:Request>
> > element that matches the values of their corresponding AttributeId,
> > DataType, and Issuer attributes. The AttributeId attribute MUST match,
> > by string equality on the URIs, that of the AttributeId attribute of the
> > <xacml-context:Attribute> element. The DataType attribute MUST match, by
> > string [Qname?] equality, that of the DataType attribute of the same
> > <xacml-context:Attribute> element. If the Issuer attribute of this
> > <ResourceAttributeIsPresent> element is supplied, it MUST match, by
> > string equality, the Issuer attribute of the same
> > <xacml-context:Attribute> element. If the Issuer attribute of this
> > <ResourceAttributeIsPresent> element is not supplied, presence SHALL be
> > governed by AttributeId and DataType attributes alone, regardless of the
> > Issuer attribute of the same <xacml-context:Attribute> element even if
> > the Issuer attribute is not supplied in the located
> > <xacml-context:Attribute> element.
> >
> > The <ResourceAttributeIsPresent> MAY be passed to the <Apply> element as
> > an argument.
> >
> >     <xs:element name="ResourceAttributeIsPresent"
> >                 type="xacml:AttributeDesignatorType"/>
> >
> > The <ResourceAttributeIsPresent> element is of the
> > AttributeDesignatorType complex type.
> >
> > The <ResourceAttributeIsPresent> element has the following attributes:
> >
> > AttributeId [Required]
> >
> >     This attribute SHALL specify the AttributeId of which to match the
> >     attribute.
> >
> > DataType [Required]
> >
> >     This attribute SHALL specify the DataType of which to match the
> >     attribute.
> >
> > Issuer [Optional]
> >
> >     This attribute, if supplied, SHALL specify the Issuer of which to
> >     match the attribute.
> >
> > MustBePresent [Optional]
> >
> >     This attribute, if set to "false," specifies that this element SHALL
> >     result in false if no matching attributes can be found. This
> >     attribute, if set to "true," specifies that this element SHALL
> >     result in indeterminate if no matching attributes can be found. If
> >     this attribute is not supplied, its default value SHALL be "false".
> >
> >
> >
> > ----------------------------------------------------------------
> > To subscribe or unsubscribe from this elist use the subscription
> > manager: <http://lists.oasis-open.org/ob/adm.pl>
> >
> >
> >
>
>
> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>
>



[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]


Powered by eList eXpress LLC