OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

xacml-comment message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: RE: [xacml-comment] XACML standard

No I don’t want to report issues and wait for you to fix it before I can continue my work. XACML has made my life enough miserable already during this semester. I am unsubscribing from this email list. I just wanted you guys to know your standard is absolutely awful and I hope it dies soon.



From: DANGERVILLE Cyril <cyril.dangerville@thalesgroup.com>
Sent: Friday, December 22, 2017 11:52:54 AM
To: Sagar Limaye
Cc: xacml-comment@lists.oasis-open.org
Subject: RE: [xacml-comment] XACML standard


I am sorry for your misfortune. However, it seems - and I’m wondering why - you did not ask for help or did not report any specific issue through the proper channels in a first place, did you? It would have saved you a lot of time and energy. Otherwise, it looks like non-constructive comments that we cannot do much with, and it is not helpful. In the case of AuthzForce, you can request for support as told on the README of each project:

·         AuthzForce Core à https://github.com/authzforce/core#support

·         AuthzForce Server à https://github.com/authzforce/server#support


We are unable to find any request/issue from you on any authzforce support channel at this point. If you did, please provide some reference and we’ll be glad to help J If you didn’t but you wish to, despite all, please provide specifics as mentioned in the Support section: software/version (Authzforce Core XXX? Authzforce Server YYY?), platform, etc. so that we can reproduce. This is valid especially for technical issues, like the Eclipse IDE one you mentioned. Just for the record, they are many possible causes for issues in Eclipse IDE, not necessarily related to the JARs (e.g. AuthzForce) you are trying to use, per se; such as bad IDE configuration (Java 8 support?), bad Maven configuration (connectivity to Maven Central?), bad Eclipse project configuration (is Java 8 enabled?), etc. We could help sort this out but only if you tell us about it through the proper channels I mentioned.


For documentation issues – AuthzForce Core or Server? -  yes, it could be improved, and you are welcome to give any feedback on that via AuthzForce mailing list, so that it helps us improve it.


Kind regards,



From: Sagar Limaye [mailto:sagarl3232@hotmail.com]
Sent: jeudi 21 décembre 2017 17:58
To: rich levinson; xacml-comment@lists.oasis-open.org
Subject: RE: [xacml-comment] XACML standard


I understand the motivation, but almost all implementations of it have terrible documentation, some are not even free and the free ones don’t even work as described in the documentation. AuthzForce documentation is horrible, for example. I tried to install and use it, but my Eclipse IDE just doesn’t recognize its classes and functions. Ws02 server doesn’t give the correct responses to the requests against the policies I used, and it’s not free. The other implementations like Balana or SunXACML are either abandoned, or only support 2.0. All this makes me wonder why this standard exists. I don’t want to waste my time learning it anymore.



From: rich levinson
Sent: Tuesday, December 19, 2017 7:09 PM
To: Sagar Limaye; xacml-comment@lists.oasis-open.org
Subject: Re: [xacml-comment] XACML standard


Hi Sagar,

I feel bad that you had difficulty w the std.

It is true that as a stand-alone document, it is pretty difficult
for a beginner to get a good understanding of the motivation
behind the standard, which is to standardize repreesentation
of security policy for authorization and/or authentication.

I would suggest using google to search for:
    xacml tutorial

Some of these tutorials may provide the necessary context
for being able to more effectively use the spec.

  Rich Levinson

On 12/19/2017 1:14 PM, Sagar Limaye wrote:


This is the worst standard I have ever seen. There is literally no documentation available to get beginners to use it. The implementations listed on the website are all half-assed, and some are non existent. I can't believe how much time I wasted this semester trying to research into XACML, it ruined the grade for one of my classes. I hope I never have to use this useless standard ever again.

Thanks for nothing,




[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]