Re: [xacml] subjects

[Anne Anderson - Sun Microsystems <Anne.Anderson@Sun.COM>]

Polar,

Thanks - I misread the lines saying "if true then a *AttributeDesignator SHALL
return a bag consisting of at least one attribute value" as "then
a *AttributeIsPresent SHALL return a bag".  After a night's sleep, I see you
are correct, and I don't even think the wording is unclear.

I vote to keep the "*AttributeIsPresent" elements: I think they serve a
useful function and are well-specified.

Anne

P.S. Look at the nesting of the "A wrote" "P wrote" "A wrote" ... below.
And we think XACML structures are complicated!

"Polar Humenn" <polar@syr.edu> wrote:
>Date: Tue, 5 Nov 2002 21:02:58 -0500 (EST)
>
>No, because a *IsPresent returns a boolean.
>AttributeDesignator returns a bag of values.
>
>On Tue, 5 Nov 2002, Anne Anderson - Sun Microsystems wrote:
>> "Polar Humenn" <polar@syr.edu> wrote:
>> >On Tue, 5 Nov 2002, Anne Anderson wrote:
>> >>   "The <CategorizedSubjectAttributeIsPresent> MAY be passed to
>> >>    the <Apply> element as an argument."
>> >>
>> >> Can it be used in a <Target><Subjects><Subject> element?  Can we
>> >> state the answer here explicitly?
>> >
>> >I had thought that <Subject> only takes a sequence of SubjectMatches.
>>
>> I mean can it be used as the AttributeDesignator argument to one of
>> the SubjectMatches.
------
Anne Anderson          Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
Burlington, MA         781-442-0928