Re: [xacml] Possible issue or editorial cleanup item - missing equalitypredicates, etc.

[Erik Rissanen <erik@axiomatics.com>]

Hi Rich,

I think we discussed this some time ago. It's intentional since there 
are pattern matching functions instead. And, yes, I also pointed out 
that this means that the set functions are not defined for those data 
types because of this, but I think this was not seen as a problem. I 
don't recall the details of the discussion though, so I might be mistaken.

I don't understand your last question.

Best regards,
Erik

Rich.Levinson wrote:
> There are no equality predicates in section A.3.1 for the following 
> datatypes:
>
>     * urn:oasis:names:tc:xacml:2.0:data-type:ipAddress
>     * urn:oasis:names:tc:xacml:2.0:data-type:dnsName
>     * urn:oasis:names:tc:xacml:3.0:data-type:xpathExpression
>
> I don't know if this was intentional, but suspect it was just an 
> oversight as these 3 data types were added after XACML 1.1.
>
> Also, it appears some or all of them may be missing from some functions:
>
>     * intersection
>     * at-least-one-member-of
>     * union
>     * subset
>     * set-equal
>
> Also, I am curious what, if any, association might or might not be 
> intended between the first two above and the Subject identifiers:
>
>     * urn:oasis:names:tc:xacml:1.0:subject:authn-locality:ip-address
>     * urn:oasis:names:tc:xacml:2.0:data-type:dnsName
>
>
>     Thanks,
>     Rich
>