Fwd: Re: Compatibility between XACML and SQL security?

[Anne Anderson - Sun Microsystems <Anne.Anderson@sun.com>]

Followup forwarded from Arnon Rosenthal.

Anne
------
Anne H. Anderson       Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
Burlington, MA         781-442-0928

--- Begin Message ---

• From: Arnon Rosenthal <arnie@mitre.org>
• To: Anne.Anderson@sun.com
• Date: Wed, 17 Sep 2003 18:07:04 -0400

I'm aware of the general path to producing XQuery, and why a separate query language is
needed.

My concern was specifically about whether XACML  could share critical underlying
abstractions with SQL, and specify both over those abstractions.   Examples include
Composition, Grant, Revoke, Derived Object.

Anne Anderson wrote:

> Arnon,
>
> The following is about XML and query languages in general, and
> not specifically about XACML and SQL security, but perhaps will
> be of interest to you.
>
> "XQuery from the Experts: Influences on the Design of XQuery. Book
> Excerpt Explores the Origins of the XML Query Language." By Don
> Chamberlin (IBM Fellow, Almaden Research Lab). From IBM
> developerWorks, XML zone. September 03, 2003. Excerpted from Chapter
> 2, "Influences on the Design of XQuery," in the book XQuery from the
> Experts: A Guide to the W3C XML Query Language (Addison-Wesley). Early
> in its history, the W3C XML Query Working Group confronted the
> question of whether XML is sufficiently different from other data
> formats to require a query language of its own. This excerpted section
> discusses differences between XML data and relational data from the
> point of view of a query language.
> http://www-106.ibm.com/developerworks/xml/library/x-xqbook.html
> http://xml.coverpages.org/xmlPapers200309.html#Chamberlin
>
> Anne Anderson
>
> On 3 September, Arnon Rosenthal writes: Compatibility between XACML and SQL security?
>  > From: Arnon Rosenthal <arnie@mitre.org>
>  > To: Anne.Anderson@sun.com
>  > CC: Pierangela Samarati <samarati@dsi.unimi.it>
>  > Subject: Compatibility between XACML and SQL security?
>  > Date: Wed, 03 Sep 2003 13:11:13 -0400
>  >
>  > (PierAngela suggested that I contact one of the chairs.
>  > I thought I shouldn't send it to the hole TC,
>  > without first hearing a reaction).
>  >
>  >
>  > Has anyone studied compatibility between XACML and  SQL security?  Or
>  > better yet,
>  > defined a formal model to extract a common portion?
>  >
>  > My thought is that DBMS vendors want to build dual-personality DBMSs
>  > (XML+SQL), where both models are "first class" at  both storage and
>  > interface.
>  > I realize that XML usage goes far beyond databases, and XACML intends to
>  > be far more expressive.  Still,  inconsistency on the interesection
>  > will be painful, and SQL does have some useful notions (like derived
>  > data).
>  >
>  > I don't think SQL can just be called legacy.   There's probably room for
>  > both it and XQuery, since they differ very substantially in power &
>  > attendant complexity  (unlike, say SQL and entity-relationship).
>  >
>  > --
>  >         arnie
>  >
>  > Arnon Rosenthal         arnie@mitre.org         (781)-271-7577
>  > The MITRE Corporation   202 Burlington Road k/308,   Bedford MA
>  > 01730      USA
>  >        http://www.mitre.org/tech/itc/staffpages/arnie/index.html
>  >
>
> --
> Anne H. Anderson             Email: Anne.Anderson@Sun.COM
> Sun Microsystems Laboratories
> 1 Network Drive,UBUR02-311     Tel: 781/442-0928
> Burlington, MA 01803-0902 USA  Fax: 781/442-1692

--
        arnie

Arnon Rosenthal         arnie@mitre.org         (781)-271-7577
The MITRE Corporation   202 Burlington Road k/308,   Bedford MA 01730      USA
       http://www.mitre.org/tech/itc/staffpages/arnie/index.html

--- End Message ---