Re: [xacml] Groups - Changes Since XACML 1.0(xacml_1.x_2.0_diffs_draft.doc) uploaded

[Seth Proctor <Seth.Proctor@sun.com>]

On Jun 23, 2005, at 12:12 PM, Anne Anderson wrote:
> 5. I would include <VariableDefinition> along with  
> <VariableReference>,
> since they go together.

Anne's email has reminded me that I meant to comment on this, but  
lost track of it. Sorry. Anyway, I agree with her comment here. I  
also suggest that you not use the term "Macro Capabilities" since  
this is misleading. The definition/reference feature isn't just a  
simple search-and-replace macro feature. It changes the semantics of  
the language in several key ways (among other things, introducing  
recursion and the possibility for infinite loops). I think it's  
important that users understand just what can be done with this  
feature so they don't mis-use it.

A couple other quick comments:

   1. You should probably note under "Combining Algorithm Parameters"  
that no standard
      algorithms use this feature

   2. Missing Attribute Detail is not a new feature, it's just been  
changed to support
      better error reporting


seth