Re: [regrep] Using IDREF for accessControlPolicy

[Max Voskob <mvoskob@msi.com.au>]

Monica,

From my point of view it is a design flaw to use IDREF in this particular
situation. It creates an unnecessary constraint rather than solves the
problem of indicating the relationship. Anyway, if you look at the data
model the honorable committee provided for RIM there are NO foreign keys.
What's the point to use ID/IDREF if there is no integrity reinforcement in
the DB?

I attached the response from one of committee members.

Regards,
Max

P.S.: It would be great if technical questions were answered thru the
mailing list so people do not need to chase it up like in this case.


----- Original Message -----
From: "Monica Martin" <mmartin@certivo.net>
To: "Max Voskob" <mvoskob@msi.com.au>
Sent: Tuesday, June 18, 2002 12:41 AM
Subject: RE: [regrep] Using IDREF for accessControlPolicy


> I would ask the responder to further explain and then publish it to the
> list.  (I need more info too).
>
> Monica
>
> -----Original Message-----
> From: Max Voskob
> Sent: Mon 6/17/2002 4:50 AM
> To: Monica Martin
> Cc:
> Subject: Re: [regrep] Using IDREF for accessControlPolicy
>
>
>
> yep, but it still doesn't make much sense to me, a mere
> developer :)))
>
> Could you try to explain it to me again ?
>
> Thanx,
> Max
>
> ----- Original Message -----
> From: "Monica Martin" <mmartin@certivo.net>
> To: "Max Voskob" <mvoskob@msi.com.au>
> Sent: Monday, June 17, 2002 12:55 PM
> Subject: RE: [regrep] Using IDREF for accessControlPolicy
>
>
> > Did you get an answer?
> >
> > -----Original Message-----
> > From: Max Voskob
> > Sent: Fri 6/14/2002 2:15 AM
> > To: regrep@lists.oasis-open.org
> > Cc:
> > Subject: [regrep] Using IDREF for accessControlPolicy
> >
> >
> >
> > Hi all!
> >
> > I'm sorry for littering this honorable mailing list with my
> > silly questions,
> > but I'm a bit confused about the schemas. Could someone tell
> me
> > where I'm
> > wrong, please?
> >
> > In particular I'm confused about using IDREF type for
> > accessControlPolicy.
> > Assume a situation when I get an object with an
> > accessControlPolicy attribute
> > that references another attribute of type ID which is not in
> the
> > document.
> > The whole document becomes INVALID when logically it is valid.
> >
> > Using IDREF in this case forces me, as an implementer, to
> choose
> > either:
> > 1. do not use any validation of registry responses
> > OR
> > 2. always include a description of all referenced
> > accessSecurityPolicies.
> >
> > I would prefer neither of them! I'd like to be able to
> reference
> > something
> > outside of the document and still use schema validation.
> >
> > Regards,
> > Max Voskob
> >
> >
> >
> >
> >
> > MSI Business Solutions:
> > Level 12, 67 Albert Ave
> > Chatswood NSW 2067
> >
> > We are a One to One Business solutions and Consulting Company
> > that assists our clients to become Customer-Centric with
> > appropriately tailored strategies,services and enabling
> > technologies.
> >
> > Office Phone:   +61 2 94128333
> > Facsimile:              +61 2 94134275
> >
> > Web Site:       http://www.msi.com.au/
> >
> >
> ----------------------------------------------------------------
> > To subscribe or unsubscribe from this elist use the
> subscription
> > manager: < http://lists.oasis-open.org/ob/adm.pl>
> >
> >
> >
>
>
>
>

--- Begin Message ---

• From: Farrukh Najmi <Farrukh.Najmi@Sun.COM>
• To: 'Oasis RR Comment Resolution' <regrep-comresolve@lists.oasis-open.org>
• Date: Fri, 14 Jun 2002 11:48:26 -0400

Guys,

There is no change needed. The way it works is:

-We do not spec ACP today and expect that it is defined out of band with
registry and associated with your object

-We require that ACP have an id like other registry objects

-Any Submitted object may reference an ACP by specifying its ID as an IDREF
type.

-The ACP is never submitted in a SubmitObjectRequest so it can never be in the
same document

-The ID/IDREF linkage is validated by having an ObjectRef with id same as the id
in accessControlPolicy attribute on the RegistryObject.

What this allows is for us to support custom ACP in V2.0 and link a custom ACP
to submitted objects assuming the custom ACP gets into the registry using
registry specific means.

So we dont need to change anything. Validation will work fine if there is an
ObjectRef with the same id as the accessControlProperty attribute value.

If you agree then we can send above explanation out.

"Damodaran, Suresh" wrote:

> Hi guys,
>
> It seems he is worried about schema validation,
> and it has nothing really to do with accessControlPolicy?
> Perhaps we can remove IDREF?
>
> What do you think?
>
> -Suresh
> Sterling Commerce
>
> -----Original Message-----
> From: Max Voskob [mailto:mvoskob@msi.com.au]
> Sent: Friday, June 14, 2002 3:15 AM
> To: regrep@lists.oasis-open.org
> Subject: [regrep] Using IDREF for accessControlPolicy
>
> Hi all!
>
> I'm sorry for littering this honorable mailing list with my silly questions,
>
> but I'm a bit confused about the schemas. Could someone tell me where I'm
> wrong, please?
>
> In particular I'm confused about using IDREF type for accessControlPolicy.
> Assume a situation when I get an object with an accessControlPolicy
> attribute
> that references another attribute of type ID which is not in the document.
> The whole document becomes INVALID when logically it is valid.
>
> Using IDREF in this case forces me, as an implementer, to choose either:
> 1. do not use any validation of registry responses
> OR
> 2. always include a description of all referenced accessSecurityPolicies.
>
> I would prefer neither of them! I'd like to be able to reference something
> outside of the document and still use schema validation.
>
> Regards,
> Max Voskob
>
>
>
> MSI Business Solutions:
> Level 12, 67 Albert Ave
> Chatswood NSW 2067
>
> We are a One to One Business solutions and Consulting Company
> that assists our clients to become Customer-Centric with
> appropriately tailored strategies,services and enabling technologies.
>
> Office Phone:   +61 2 94128333
> Facsimile:              +61 2 94134275
>
> Web Site:       http://www.msi.com.au/
>
> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>

--
Regards,
Farrukh



----------------------------------------------------------------
To subscribe or unsubscribe from this elist use the subscription
manager: <http://lists.oasis-open.org/ob/adm.pl>

--- End Message ---