[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: RE: [xacml-dev] RE: [sunxacml-discuss] RE: Use of Xquery with XACML
Totally agree with this. In fact when Xpath is used within the Rules or Conditions it's implemented as a function. I think there is some overlaping between RequestContext and the xpath related function, because both supports searching elements using Xpath, but I don't see this very confusing. In fact it also allows more information by the time of processing the policy and also is easy to create context bound xpath. Regards, DiegoG -----Original Message----- From: Daniel Engovatov [mailto:email@example.com] Sent: Wednesday, December 08, 2004 5:48 PM To: Muhammad Masoom Alam; firstname.lastname@example.org Cc: Seth Proctor; email@example.com Subject: [xacml-dev] RE: [sunxacml-discuss] RE: Use of Xquery with XACML If you want to extend XACML functions to use XQuery, you will have to do it yourself. There is no direct mapping, as XQuery/XPath data model is not directly compatible with XACML data model. This is done on purpose as XACML Data model is designed to accommodate a broader ranger of data sources then XML. If you write a custom function that does XQuery or XLST transformation to return XACML attribute value to be used in a rule, you can pass the actual query code as a string literal attribute. You will also need to address how do you provide prolog data and XQuery context, but this is completely outside of XACML implementation. Daniel; -----Original Message----- From: Muhammad Masoom Alam [mailto:Muhammad.firstname.lastname@example.org] Sent: Wednesday, December 08, 2004 11:14 AM To: Daniel Engovatov; email@example.com Cc: Seth Proctor; firstname.lastname@example.org Subject: Re: [sunxacml-discuss] RE: Use of Xquery with XACML Dear , and if the authorization system(PDP) itself wants to use Xquery to make a decision for a resource (XML data / or any resource) , where this Xquery is going to be stored, how Authorization System is going to reference this Xquery as currently there is no support for Xquery and very limited support for Xpath as well. Regards Muhammad.