RE: [xacml] wd8 multi profile comments

["Tyson, Paul H" <PTyson@bellhelicopter.textron.com>]

> -----Original Message-----
> From: Erik Rissanen [mailto:erik@axiomatics.com] 
> Sent: Tuesday, January 05, 2010 08:52
> To: Tyson, Paul H
> Cc: xacml@lists.oasis-open.org
> Subject: Re: [xacml] wd8 multi profile comments
> 

> >>> 	Steps 2 and 3: I suggest reversing these steps.  It would be 
> >>> cleaner to expand "scope" and "multiple:content-selector"
> >>>        
> >> first, because
> >>      
> >>> the result will always yield repeated attributes
> >>>        
> >> categories.  These can
> >>      
> >>> then be processed the same as repeated attributes 
> categories in the 
> >>> initial request context (or result of expanding MultiRequests).
> >>>
> >>>        
> >> Would you be ok with the current wording? If I re-order 
> it, there is 
> >> a risk that I mess up the cross references between the steps.
> >>      
> > If you leave it as is, you should add a loop condition to 
> repeat step 
> > 2 if there are repeated attributes categories.  It is a cleaner 
> > algorithm to resolve multiple:content-selector ahead of repeated 
> > attributes categories.
> >    
> 
> How could there be repeated attributes categories after step 
> 2 has already been performed? The order of processing appears 
> entirely arbitrary to me.

Yes, you are right.  I had to work an example to see what was going on.
No further changes are necessary.

Regards,
--Paul