Section B.6 - Resource attributes

[Tim Moses <tim.moses@entrust.com>]

Colleagues - Some proposed changes to Section B.6.  Any comments?  All the
best.  Tim.


Draft 12

These identifiers indicate attributes of the resource.  When used, they
SHALL appear within the <Resource> element of the request context.  They
SHALL be accessed via a <ResourceAttributeDesignator> or an
<AttributeSelector> element pointing into the <Resource> element of the
request context.
This identifier indicates the entire URI of the resource.
urn:oasis:names:tc:xacml:1.0:resource:resource-id
A resource attribute used to indicate values extracted from the resource.
urn:oasis:names:tc:xacml:2.0:resource:resource-content


Draft 13

These identifiers indicate attributes of the resource.  The corresponding
attributes MAY appear in the <Resource> element of the request context and
be accessed by means of a <ResourceAttributeDesignator> element, or by an
<AttributeSelector> element that points into the <Resource> element of the
request context.  In the former case, the attribute identifier SHALL appear
in the <ResourceAttributeDesignator> element.
This identifier indicates the URI of the resource.  The type of the
corresponding attribute SHALL be "http://www.w3.org/2001/XMLSchema#anyURI";.
urn:oasis:names:tc:xacml:1.0:resource:resource-id
This identifier indicates the name-space of the top element of the resource.
In the case where the resource content is supplied in the request context
and the resource namespace is defined in the resource, the PDP SHALL confirm
that the namespace defined by this attribute is the same as that defined in
the resource.  The type of the corresponding attribute SHALL be
"http://www.w3.org/2001/XMLSchema#anyURI";.
urn:oasis:names:tc:xacml:2.0:resource:target-namespace
This identifier indicates an xpath expression whose context node is the
<xacml-context:Request> element.  This attribute SHALL only appear in the
<ResourceAttributeDesignator> element.  The type of the corresponding
attribute SHALL be
"urn:oasis:names:tc:xacml:2.0:data-type:xpath-expression".
urn:oasis:names:tc:xacml:2.0:resource:xpath

-----------------------------------------------------------------
Tim Moses
613.270.3183