RE: [xacml] another small time/date issue

[Seth Proctor <Seth.Proctor@Sun.COM>]

On Tue, 2003-08-12 at 12:33, Daniel Engovatov wrote:
> But then we have the same issue with any other attribute that is part of
> the "context" - does it remain static for the duration of evaluation?
> I am not sure that we can place a requirement on the information source
> to remain static, nor a requirement on PDP to "cache" the data somehow.
> I understood that it is the implementation choice how the relevant bits
> of data are computed in PIP and retrieved - I remember that we
> explicitly left this open...

I'm not sure that we do have the same problem. The spec calls out the
current date/time attributes, and explicitly says that unlike other
attributes, these must be handled in a unique way:

  "So, unlike most other attributes, their semantics are not transparent
   to the PDP."  (10.2.5)

Based on this, I don't think a clarification about the current date/time
attributes has any effect on any other attributes in the system. All I'm
worried about is that since there's no language explaining how current
values must be provided, it leaves different implementations open to
different models.


seth