Re: [xacml] Issue: Hierarchical profile appears ambiguous and inconsistent

[Daniel Engovatov <daniel@streamdynamics.com>]

On Feb 18, 2009, at 3:05 PM, Rich.Levinson wrote:

> Daniel, Seth, Erik, and TC,
>
>  If we stick to the generally accepted definition that an object in  
> a hierarchy can have at most one parent, then a URI solves the  
> problem without having to look beyond the URI itself

It is NOT a generally accepted definition and we did not stick to it  
on purpose.


> However, if we allow the hierarchies to break down and lose their  
> inherent hierarchical properties, then more complicated approaches,  
> such as going outside the initial request context to get more  
> nodes, although still solvable w URIs as demo'd below, are needed.
>

It is NOT "broken down"


> Again, I am not trying to add or change any of the existing  
> functionality,

You are proposing an addition that is a subset of the more general  
approach.

I understand that you favor a different approach to this problem.     
It may be worth our while to create a separate profile for such an  
approach, but I do not see any reason to muddy the existing one.


Daniel;