Re: [xacml-comment] Incomplete definition of the ipAddress-is-inand dnsName-is-in functions

[Erik Rissanen <erik@axiomatics.com>]

Steven,

Thanks for spotting. I agree, the identifiers should be removed.

Best regards,
Erik

On 2011-03-29 05:01, Steven Legg wrote:
>
> Section 10.2.8 of the XACML 3.0 core specification (CS-01) lists
> urn:oasis:names:tc:xacml:2.0:function:ipAddress-is-in and
> urn:oasis:names:tc:xacml:2.0:function:dnsName-is-in as mandatory
> to implement functions. The type-is-in functions are described in
> appendix A.3.10 in terms of a corresponding
> urn:oasis:names:tc:xacml:x.x:function:type-equal function, however
> the necessary ipAddress-equal and dnsName-equal functions have not
> been defined.
>
> Judging from the archives there is no intention of defining the
> ipAddress-equal and dnsName-equal functions, in which case the
> ipAddress-is-in and dnsName-is-in function identifiers should be
> removed.
>
> Regards,
> Steven
>