Re: [xacml-users] does XACML v2 allow multiple values' attribute

[Oleg Gryb <oleg_gryb@yahoo.com>]

... if you send your Policy to me, I can try it with XACMLight. Request seems to be correct from XSD point of view.


--- On Fri, 1/9/09, hao chen <d95776@yahoo.com> wrote:

> From: hao chen <d95776@yahoo.com>
> Subject: [xacml-users] does XACML v2 allow multiple values' attribute
> To: xacml-users@lists.oasis-open.org
> Date: Friday, January 9, 2009, 3:38 PM
> Hi,
> 
> I use sun xacml implementation. When I use multiple
> values' attribute, I got the following error:
> Exception in thread "main"
> com.sun.xacml.ParsingException: Too many values in Attribute
> 
> The request is as
> <Request>
>   <Subject
> SubjectCategory="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject">
>     <Attribute
> AttributeId="urn:oasis:names:tc:xacml:2.0:subject:role"
> DataType="http://www.w3.org/2001/XMLSchema#anyURI";>
>    
> <AttributeValue>account:manager:role</AttributeValue>
>    
> <AttributeValue>card:member:department:manager:role</AttributeValue>
>     </Attribute>
>   </Subject>
>   <Resource>
>     <Attribute
> AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id"
> DataType="http://www.w3.org/2001/XMLSchema#string";>
>    
> <AttributeValue>AccountInformation</AttributeValue>
>     </Attribute>
>   </Resource>
>   <Action>
>     <Attribute
> AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id"
> DataType="http://www.w3.org/2001/XMLSchema#string";>
>     <AttributeValue>access</AttributeValue>
>     </Attribute>
>   </Action>
> </Request>
> 
> The sun's java doc says only one value is allowed for a
> attribute.
> 
> hao
> 
> 
>       
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:
> xacml-users-unsubscribe@lists.oasis-open.org
> For additional commands, e-mail:
> xacml-users-help@lists.oasis-open.org