RE: [xacml-dev] PolicySets

["Fatih TURKMEN" <fatih.turkmen@dit.unitn.it>]

Thank you very much for your suggestion, but either I am missing a point or
in reality you can't refer to a policy (remote --> a different file or
another location) in XACML. Is that true that, I understand from the
specification, this mechanism is left to the implementation?

This way of policy combination is not suitable for my scenario. From your
suggestion, I infer that I need to add the new policies internally (in the
code) every time when a new policy comes. Is it true?

Thanks.

--
Fatih TURKMEN
dit.unitn.it/~turkmen

-----Original Message-----
From: Anne Anderson - Sun Microsystems [mailto:Anne.Anderson@sun.com] 
Sent: Wednesday, June 13, 2007 7:03 PM
To: Fatih TURKMEN
Cc: xacml-dev@lists.oasis-open.org
Subject: Re: [xacml-dev] PolicySets

Fatih,

It sounds like you are trying to use the Sun Open Source XACML 
implementation.  You have to implement a PolicyFinderModule that knows 
how to locate the policy that is associated with a particular policy id.

Regards,
Anne

Fatih TURKMEN wrote:
> Dear All,
> 
>  
> 
> I am trying to combine several different but relevant policies within a
> single PolicySet. I found PolicyIdReference construct useful for this
> purpose but I couldn't find an example of its use for my purpose. My
problem
> is 
> 
> I have a top level 
> 
> PolicyFile1.xml
> 
> <PolicySet>
> 
> <target/>
> 
>  
> 
> <PolicyIdReference>Policy2</PolicyIdReference>
> 
>  
> 
> .. //other policies
> 
>  
> 
> </PolicySet>
> 
>  
> 
> PolicyFile2.xml
> 
> <Policy Id="Policy2">
> 
> ..
> 
> </Policy>
> 
>  
> 
> This PolicySet has policies both enclosed within <policy> tags inside of
it
> and policies located at remote locations (can be both URL or a different
> local file). The above example is not working properly. Am I missing
> something here?
> 
>  
> 
> The specification document provides the following for PolicyIdReference:
> 
> A reference to a policy that MUST be included in this policy set. If the
> 
> <PolicyIdReference> is a URL, then it MAY be resolvable.
> 
>  
> 
> So, can you please help me on how I can have several policies some of them
> are located in different files or locations within the same PolicySet?
> 
>  
> 
> Thanks in advance.
> 
>  
> 
>  
> 
> --
> 
> Fatih TURKMEN
> 
> dit.unitn.it/~turkmen
> 
>  
> 
> 

-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692

---------------------------------------------------------------------
To unsubscribe, e-mail: xacml-dev-unsubscribe@lists.oasis-open.org
For additional commands, e-mail: xacml-dev-help@lists.oasis-open.org