Re: [xacml-comment] D024

[Polar Humenn <polar@syr.edu>]

D024

The condition that John is referring to in

urn:oasis:names:tc:xacml:1.0:conformance-test:IID024:policy3

in test D024 is not type correct and therefore is not a valid policy, and
therefore not a valid policy set. Although it might niavely parse through
the policy-schema, it should not even be evaluated, because it is not type
correct.

Cheers,
-Polar

On Tue, 3 Dec 2002, Anne Anderson wrote:

> John Merrells,
>
> As in D002, this Condition was intended to produce an
> Indeterminate result (by passing the wrong argument type to the
> function) in order to test the requirements of the
> "first-applicable" algorithm, which says that a Permit or Deny
> result will be returned even if an Indeterminate result follows.
>
> Please let me know if I am overlooking something.
>
> Anne Anderson
>
> On 26 November, John Merrells writes: [xacml-comment] D024
>  > From: John Merrells <merrells@jiffysoftware.com>
>  > To: "'xacml-comment@lists.oasis-open.org'" <xacml-comment@lists.oasis-open.org>
>  > Subject: [xacml-comment] D024
>  > Date: Tue, 26 Nov 2002 17:36:20 -0800
>  >
>  >
>  > Same as D002...
>  >
>  >             <Condition
>  > FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
>  >                 <SubjectAttributeDesignator
>  >
>  > AttributeId="urn:oasis:names:tc:xacml:1.0:subject:subject-id"
>  >                       DataType="http://www.w3.org/2001/XMLSchema#string"/>
>  >                 <AttributeValue
>  >
>  > DataType="http://www.w3.org/2001/XMLSchema#string";>Zaphod
>  > Beedlebrox</AttributeValue>
>  >             </Condition>
>  >
>  >
>  >
>  > ----------------------------------------------------------------
>  > To subscribe or unsubscribe from this elist use the subscription
>  > manager: <http://lists.oasis-open.org/ob/adm.pl>
>  >
>
> --
> Anne H. Anderson             Email: Anne.Anderson@Sun.COM
> Sun Microsystems Laboratories
> 1 Network Drive,UBUR02-311     Tel: 781/442-0928
> Burlington, MA 01803-0902 USA  Fax: 781/442-1692
>
>
> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>
>