RE: [xacml] RE: Context Handler

[<remon.sinnema@emc.com>]

Erik,


> -----Original Message-----
> From: xacml@lists.oasis-open.org [mailto:xacml@lists.oasis-open.org] On
> Behalf Of Erik Rissanen
> Sent: Monday, December 19, 2011 4:02 PM
> To: Sinnema, Remon
> Cc: xacml@lists.oasis-open.org
> Subject: Re: [xacml] RE: Context Handler
> 
> Hi Ray,
> 
> Ok, I understand, but I would say that this is a flaw in the
> implementation in this case. 

I don't think the spec is clear enough in this area. It doesn't define what exactly a PIP can and cannot do. If we make the description of the PIP clearer so that it explicitly can do more than retrieve values for attributes that are missing from the request, then I agree we don't need a REP.

However, I do wonder based on what information the PDP will decide to ask the PIP for more attribute values. Or do you propose the PDP always reaches out to all PIPs?


Thanks,
Ray