Re: [xacml] Groups - XACML MAP Authorization Profile WD3 uploaded

[Steven Legg <steven.legg@viewds.com>]

Hi Richard,

Here's a couple of things I noticed on a quick scan.

The bullet point on line 302 says:

    "Unless the IF-MAP metadata item has a top-level attribute named ATTR,
     the value of the XACML attribute MUST NOT be present."

It sounds a bit like the attribute can appear without a value, which the
XML Schema doesn't allow. I'm guessing you meant this:

    Unless the IF-MAP metadata item has a top-level attribute named ATTR,
    the XACML attribute corresponding to ATTR MUST NOT be present.

Or equivalently:

    If the IF-MAP metadata item does not have a top-level attribute named ATTR,
    then the XACML attribute corresponding to ATTR MUST NOT be present.


The AttributeId on line 387 doesn't follow the format for an identifier
attribute. It seems to me like it should be
urn:oasis:names:tc:xacml:3.0:if-map:content:resource:identifier-attribute:identity:type .

Regards,
Steven

On 31/10/2013 9:19 AM, Richard Hill wrote:
> *Document Name*: XACML MAP Authorization Profile WD3 <https://www.oasis-open.org/apps/org/workgroup/xacml/document.php?document_id=51239>
> ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
--
> *Description*
> This is the third draft of the XACML MAP Authorization Profile. The
> following updates have been made: Addressed comments from WD 2 review.
> Updated to reflect changes in the TNC MAP Content Authorization v33
> specification. Added Caching Obligation. Updated Appendix A.
> Acknowledgements.
> Download Latest Revision <https://www.oasis-open.org/apps/org/workgroup/xacml/download.php/51239/latest/xacml-3_0-map-authz-v1_0-spec-wd-03-en.doc>
> Public Download Link <https://www.oasis-open.org/committees/document.php?document_id=51239&wg_abbrev=xacml>
> ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
--
> *Submitter*: Mr. Richard Hill
> *Group*: OASIS eXtensible Access Control Markup Language (XACML) TC
> *Folder*: Specifications and Working Drafts
> *Date submitted*: 2013-10-30 15:19:26