Re: [xacml-comment] D002

[Anne Anderson <Anne.Anderson@Sun.com>]

John Merrells,

This was a deliberate "error" intended to produce a result of
"Indeterminate" for that Rule.  Test Case IID002 tests that a
result of "Deny" is returned in accordance with the
deny-overrides algorithm even if one of the rules returns
Indeterminate.

Please let me know if I am overlooking something.

Anne Anderson

On 26 November, John Merrells writes: [xacml-comment] D002
 > From: John Merrells <merrells@jiffysoftware.com>
 > To: "'xacml-comment@lists.oasis-open.org'" <xacml-comment@lists.oasis-open.org>
 > Subject: [xacml-comment] D002
 > Date: Tue, 26 Nov 2002 17:35:05 -0800
 > 
 > 
 > The policy uses string-equal as if the args were (bag<string>,string), 
 > this should
 > probably be using the any-of method...
 > 
 >         <Condition 
 > FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
 >             <SubjectAttributeDesignator
 >                   
 > AttributeId="urn:oasis:names:tc:xacml:1.0:conformance-tests:bogus"
 >                   DataType="http://www.w3.org/2001/XMLSchema#string"/>
 >             <AttributeValue
 >                   
 > DataType="http://www.w3.org/2001/XMLSchema#string";>Zaphod 
 > Beeblebrox</AttributeValue>
 > 
 > I bet this snippet was cut from a Target and pasted into a Condition. 
 > This is
 > exactly the problem I was talking about yesterday...
 > 
 > John
 > 
 > 
 > ----------------------------------------------------------------
 > To subscribe or unsubscribe from this elist use the subscription
 > manager: <http://lists.oasis-open.org/ob/adm.pl>
 > 

-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692