RE: [wss] Issue 389: Detection of Duplicate IDs

["Reid, Irving" <irving.reid@hp.com>]

> From: ronald monzillo [mailto:Ronald.Monzillo@sun.com] 
> 
> Is is not sufficient to say something like the following
> 
> The wsse:Security processing MUST generate a fault if it 
> employes any id attribute in its processing for which there 
> are multiple elements within the message that share with the 
> same id attribute name and value.

No, it's not sufficient. The attribute *name* is completely irrelevant. All attributes that are given type "ID" by some XML schema or DTD map into the same identifier namespace, in a sense. That's why it's such a problem - when you get an arbitrary XML document, you need to have access to all the applicable schemas in order to determine which attributes are IDs.

 - irving -