[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [xacml-comment] xacml-3.0-profile-webservices-spec-v1-wd-10 <--Other bugs & script
Oleg Gryb schrieb: > Yes, it's a good idea and there is definitely a room for improvement > in "discrepancy count" tool :) I just wanted to check other version > discrepancies fast and found 'target-namespace'. Dear XACML committee, please check the appended warnings.txt file, which I ran against XACML3.0-wd06. It contains some interesting warnings. I've commented out the "singleton warnings" in the program, as there were too many false positives. But one of these lines caught my attention: warning: singleton appearance of basename "integer-greater-then" in line 3427 Roland
warning: multiple namespaces for basename "date-less-or-equal":
line 941: "urn:oasis:names:tc:xacml:3.0:function:date-less-or-equal"
line 1043: "urn:oasis:names:tc:xacml:1.0:function:date-less-or-equal"
warning: multiple namespaces for basename "target-namespace":
line 859: "urn:oasis:names:tc:xacml:3.0:resource:target-namespace"
line 1085: "urn:oasis:names:tc:xacml:1.0:resource:target-namespace"
warning: multiple namespaces for basename "target-namespace":
line 859: "urn:oasis:names:tc:xacml:3.0:resource:target-namespace"
line 1253: "urn:oasis:names:tc:xacml:1.0:resource:target-namespace"
warning: multiple namespaces for basename "deny-overrides":
line 819: "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"
line 1322: "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"
warning: multiple namespaces for basename "target-namespace":
line 859: "urn:oasis:names:tc:xacml:3.0:resource:target-namespace"
line 1335: "urn:oasis:names:tc:xacml:1.0:resource:target-namespace"
warning: multiple namespaces for basename "missing-attribute":
line 2158: "urn:oasis:names:tc:xacml:1.0:status:missing-attribute"
line 2470: "urn:oasis:names:tc:xacml:1.0:missing-attribute"
warning: multiple namespaces for basename "missing-attribute":
line 2158: "urn:oasis:names:tc:xacml:1.0:status:missing-attribute"
line 2472: "urn:oasis:names:tc:xacml:1.0:missing-attribute"
warning: multiple namespaces for basename "example":
line 1152: "urn:oasis:names:tc:xacml:3.0:example"
line 2664: "urn:oasis:names:tc:xacml:2.0:example"
warning: multiple namespaces for basename "function":
line 2665: "urn:oasis:names:tc:xacml:1.0:function"
line 2666: "urn:oasis:names:tc:xacml:2.0:function"
warning: multiple namespaces for basename "resource":
line 606: "urn:oasis:names:tc:xacml:3.0:attribute-category:resource"
line 2669: "urn:oasis:names:tc:xacml:1.0:resource"
warning: multiple namespaces for basename "action":
line 615: "urn:oasis:names:tc:xacml:3.0:attribute-category:action"
line 2670: "urn:oasis:names:tc:xacml:1.0:action"
warning: multiple namespaces for basename "environment":
line 945: "urn:oasis:names:tc:xacml:3.0:attribute-category:environment"
line 2671: "urn:oasis:names:tc:xacml:1.0:environment"
warning: multiple namespaces for basename "deny-overrides":
line 819: "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"
line 2679: "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"
warning: multiple namespaces for basename "permit-overrides":
line 2681: "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides"
line 2683: "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:permit-overrides"
warning: multiple namespaces for basename "first-applicable":
line 2685: "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:first-applicable"
line 2687: "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:first-applicable"
warning: multiple namespaces for basename "ordered-deny-overrides":
line 2691: "urn:oasis:names:tc:xacml:1.1:rule-combining-algorithm:ordered-deny-overrides"
line 2693: "urn:oasis:names:tc:xacml:1.1:policy-combining-algorithm:ordered-deny-overrides"
warning: multiple namespaces for basename "ordered-permit-overrides":
line 2695: "urn:oasis:names:tc:xacml:1.1:rule-combining-algorithm:ordered-permit-overrides"
line 2697: "urn:oasis:names:tc:xacml:1.1:policy-combining-algorithm:ordered-permit-overrides"
warning: multiple namespaces for basename "xpathExpression":
line 868: "urn:oasis:names:tc:xacml:3.0:data-type:xpathExpression"
line 2795: "urn:oasis:names:tc:xacml:3.0:data-types:xpathExpression"
warning: multiple namespaces for basename "xpath-node-match":
line 863: "urn:oasis:names:tc:xacml:3.0:function:xpath-node-match"
line 3133: "urn:oasis:names:tc:xacml:1.0:function:xpath-node-match"
warning: multiple namespaces for basename "time-in-range":
line 2915: "urn:oasis:names:tc:xacml:2.0:function:time-in-range"
line 3442: "urn:oasis:names:tc:xacml:1.0:function:time-in-range"
warning: multiple namespaces for basename "type-is-in":
line 3522: "urn:oasis:names:tc:xacml:1.0:function:type-is-in"
line 3531: "urn:oasis:names:tc:xacml:x.x:function:type-is-in"
warning: multiple namespaces for basename "type-subset":
line 3534: "urn:oasis:names:tc:xacml:1.0:function:type-subset"
line 3537: "urn:oasis:names:tc:xacml:x.x:function:type-subset"
warning: multiple namespaces for basename "type-subset":
line 3534: "urn:oasis:names:tc:xacml:1.0:function:type-subset"
line 3537: "urn:oasis:names:tc:xacml:x.x:function:type-subset"
warning: multiple namespaces for basename "x500Name":
line 2793: "urn:oasis:names:tc:xacml:1.0:data-type:x500Name"
line 3715: "urn:oasis:names:tc:xacml:2.0:data-type:x500Name"
warning: multiple namespaces for basename "xpath-node-count":
line 3129: "urn:oasis:names:tc:xacml:1.0:function:xpath-node-count"
line 3725: "urn:oasis:names:tc:xacml:3.0:function:xpath-node-count"
warning: multiple namespaces for basename "xpath-node-equal":
line 3131: "urn:oasis:names:tc:xacml:1.0:function:xpath-node-equal"
line 3727: "urn:oasis:names:tc:xacml:3.0:function:xpath-node-equal"
warning: multiple namespaces for basename "xpath-node-match":
line 863: "urn:oasis:names:tc:xacml:3.0:function:xpath-node-match"
line 3740: "urn:oasis:names:tc:xacml:1.0:function:xpath-node-match"
warning: multiple namespaces for basename "authentication-method":
line 2729: "urn:oasis:names:tc:xacml:1.0:subject:authentication-method"
line 3798: "urn:oasis:names:tc:xacml:1.0:subject:authn-locality:authentication-method"
warning: multiple namespaces for basename "target-namespace":
line 859: "urn:oasis:names:tc:xacml:3.0:resource:target-namespace"
line 3817: "urn:oasis:names:tc:xacml:2.0:resource:target-namespace"
warning: multiple namespaces for basename "deny-overrides":
line 819: "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides"
line 3850: "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides"
warning: multiple namespaces for basename "permit-overrides":
line 2681: "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides"
line 3854: "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:permit-overrides"
warning: multiple namespaces for basename "first-applicable":
line 2685: "urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:first-applicable"
line 3858: "urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:first-applicable"
warning: multiple namespaces for basename "ordered-deny-overrides":
line 2691: "urn:oasis:names:tc:xacml:1.1:rule-combining-algorithm:ordered-deny-overrides"
line 3864: "urn:oasis:names:tc:xacml:1.1:policy-combining-algorithm:ordered-deny-overrides"
warning: multiple namespaces for basename "ordered-permit-overrides":
line 2695: "urn:oasis:names:tc:xacml:1.1:rule-combining-algorithm:ordered-permit-overrides"
line 3868: "urn:oasis:names:tc:xacml:1.1:policy-combining-algorithm:ordered-permit-overrides"
warning: multiple namespaces for basename "xpath":
line 776: "urn:oasis:names:tc:xacml:1.0:resource:xpath"
line 4220: "urn:oasi:names:tc:xacml:1.0:resource:xpath"
#! /usr/bin/perl
use strict;
use warnings;
my %names = (); # string -> [ fullname, lineno, occurences ]
my $regex_urn = qr"((urn:[\w\-.:_]+):([\w\-._]+))";
my $warnings = 0;
while (defined(my $line = <>)) {
chomp($line);
while ($line =~ s/$regex_urn//) {
my ($urn, $path, $name) = ($1, $2, $3);
if ($urn =~ /:example:/ || $name =~ /^\d+$/) {
# ignore these, since multiple namespaces
# are ok for them.
} elsif (exists($names{$name})) {
my $entry = $names{$name};
if ($entry->[0] eq $urn) {
$entry->[2]++;
} else {
printf STDERR ("warning: multiple namespaces for basename \"%s\":\n"
. " line %d: \"%s\"\n"
. " line %d: \"%s\"\n",
$name, $entry->[1], $entry->[0], $., $urn);
$warnings++;
}
} else {
$names{$name} = [ $urn, $., 1, 0 ];
}
}
}
foreach my $name (sort keys %names) {
my $entry = $names{$name};
if (0 && $entry->[2] == 1) {
printf STDERR ("warning: singleton appearance of basename \"%s\" in line %d\n",
$name, $entry->[1]);
}
}
exit(1) if ($warnings != 0);
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]