RE: [xacml] Multiple Decison Request Proposal

["Hal Lockhart" <hal.lockhart@oracle.com>]

As of today's meeting I believe we are down to deciding how to do correlation. The alternative previously proposed is to use the IncludeInResponse mechanism. This may involve submitting synthetic attributes, not referenced by policy, simply to correlate requests and decisions.

The new idea (at least to me) is to move my previously proposed XML Attribute - CorrelationID - to the <Attributes> element instead of having it in the <DecisionList> element.

This seems clearer to me, but others should express their opinions. The new scheme would look something like this:

<Request>

  <DecisionLists>

    <DecisionList>

        <ListReference URI="Sub1"/>

        <ListReference URI="Env"/>

        <ListReference URI="Res1"/>

        <ListReference URI="Act1"/>


    </DecisionList>


    <DecisionList>

        <ListReference URI="Sub1"/>

        <ListReference URI="Sub2"/>

        <ListReference URI="Env"/>

        <ListReference URI="Res2"/>

        <ListReference URI="Act2"/>

    </DecisionList>


    <DecisionList>

        <ListReference URI="Sub3"/>

        <ListReference URI="Env"/>

        <ListReference URI="Res1"/>

        <ListReference URI="Act2"/>

    </DecisionList>


    <DecisionList ... >
    ...

    </DecisionList>


  </DecisionLists>


    <Attributes Category="Access_Subject" XML:Id="Sub1" CorrelationId="FirstSubject">

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

    </Attributes>

    <Attributes Category="Intemediary_Subject" XML:Id="Sub2" CorrelationId="SecondSubject">

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

    </Attributes>


    <Attributes Category="Intemediary_Subject" XML:Id="Sub3" CorrelationId="ThirdSubject">

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

    </Attributes>

   <Attributes Category="Environment" XML:Id="Env">

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

    </Attributes>

    <Attributes Category="Resource" XML:Id="Res1" CorrelationId="FirstResource">

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

    </Attributes>


    <Attributes Category="Resource" XML:Id="Res2" CorrelationId="Secondresource">

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

    </Attributes>

    <Attributes Category="Action" XML:Id="Act1" CorrelationId="FirstAction">

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

    </Attributes>

    <Attributes Category="Action" XML:Id="Act2" CorrelationId="SecondAction">

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

      <Attribute>
      ...
      </Attribute>

    </Attributes>


...


</Request>


Hal