Re: [xacml-dev] Username in the <Delegate> element

[Erik Rissanen <mirty@sics.se>]

Muhammad Masoom Alam wrote:

>Hi all,
>
>   In the XACML Administration Profile V7 have Username as subject-id. It makes a bit difficult to get the attributes of the delegator since subject is the delegatee not the delegator according to the profile.
>
>  Can we add some complex Object representing the delegatee and delegator in stead of simple user name. Even a role name will not be sufficed in this case of dynamic delegation.
>
>regards
>Muhammad.
>  
>

You can put any attribute in the Delegate element, and the context
handler should be able to resolve the attributes in the same way as the
attributes of the Subject. Why cannot you get the attributes of the
Delegate? Could you explain in more detail?

Regards, Erik