RE: [security-services] Audience Restriction nit...

["Nick Ragouzis" <nickr@enosis.com>]

Yes, ur right, extends condition. --Nick

> -----Original Message-----
> From: Cahill, Conor P [mailto:conor.p.cahill@intel.com] 
> Sent: Thursday, March 02, 2006 02:59 PM
> To: Nick Ragouzis; jmoreh@sigaba.com; OASIS Security Services TC
> Subject: RE: [security-services] Audience Restriction nit...
> 
> 
> 
> Well, you're showing that it is confusing.  The AR is a child
> of the Conditions, not Condition.    So the example would be
> more of:
> 
> OR:
> 	<Conditions>
> 		<AudienceRestriction>
> 			<Audience>1</audience>
> 			<Audience>2</audience>
> 		</AudienceRestriction>
> 	</Conditions>
> 
> AND:
> 	<Conditions>
> 		<AudienceRestriction>
> 			<Audience>1</audience>
> 		</AudienceRestriction>
> 		<AudienceRestriction>
> 			<Audience>2</audience>
> 		</AudienceRestriction>
> 	</Conditions>
> 
> Either that or I'm still reading it wrong after I thought 
> about it for a bit.
> 
> Conor
> 	 
> 
> > -----Original Message-----
> > From: Nick Ragouzis [mailto:nickr@enosis.com] 
> > Sent: Thursday, March 02, 2006 5:53 PM
> > To: jmoreh@sigaba.com; Cahill, Conor P; 'OASIS Security Services TC'
> > Subject: RE: [security-services] Audience Restriction nit...
> > 
> > Maybe the little diagram I drew in my print copy would be 
> > worth adding somewhere (fixed up, of course):
> > 
> > 
> > OR:
> > <Assertion>
> >   <Conditions>
> >      <Condition>
> >          <AudienceRestriction><Audience>1
> >          <AudienceRestriction><Audience>2
> > 
> > AND:
> > <Assertion>
> >   <Conditions>
> >      <Condition>
> >          <AudienceRestriction><Audience>1
> >      <Condition>
> >          <AudienceRestriction><Audience>2
> > 
> > --Nick
> > 
> > > -----Original Message-----
> > > From: Jahan Moreh [mailto:jmoreh@sigaba.com]
> > > Sent: Thursday, March 02, 2006 02:19 PM
> > > To: 'Cahill, Conor P'; 'OASIS Security Services TC'
> > > Subject: RE: [security-services] Audience Restriction nit...
> > > 
> > > 
> > > Added to errata doc....
> > >  
> > >  
> > > Jahan
> > >  
> > > 
> > > 
> > >   _____
> > > 
> > > 	From: Cahill, Conor P [mailto:conor.p.cahill@intel.com] 
> > > 	Sent: Thursday, March 02, 2006 1:55 PM
> > > 	To: OASIS Security Services TC
> > > 	Subject: [security-services] Audience Restriction nit...
> > > 	
> > > 	
> > > 	On lines 922-925 in the core specification for 2.0, the
> > > sentence:
> > > 
> > > 		The effect of this requirement and the 
> > preceding definition is that 
> > > within a given condition, the audiences forma a disjunction 
> > (an "OR") 
> > > while multiple conditions form a  conjuntion (an "AND")
> > > 
> > > 	 took me a bit of throught to figure out (no comments 
> > > on my thought process, scott).   I think we could add a note 
> > > to the errata and perhaps make it into some future version 
> > that this 
> > > would read better as follows
> > > 
> > > 		The effect of this requirement and the 
> > preceding definition is that 
> > > within a given <AudienceRestrictioin, the <Audience>s form a 
> > > disjunction (an
> > > "OR") while multiple <AudienceRestrictions> form a conjuntion (an 
> > > "AND").
> > > 
> > > 	As I said in the subject, just a nit.
> > > 	 
> > > 	Conor
> > > 
> > > 
> > 
> > 
> > 
> ---------------------------------------------------------------------
> > To unsubscribe from this mail list, you must leave the OASIS 
> > TC that generates this mail.  You may a link to this group 
> > and all your TCs in OASIS
> > at:
> > https://www.oasis-open.org/apps/org/workgroup/portal/my_workgr
> oups.php 
> > 
> 
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  You may a link to this group and all 
> your TCs in OASIS
> at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgr
> oups.php 
> 
>