Re: [xacml-users] does XACML v2 allow multiple values' attribute

[hao chen <d95776@yahoo.com>]

Sorry, I sent you a wrong version of request. The attached should be the multi values attr.

Best Regard
hao

--- On Fri, 1/9/09, Oleg Gryb <oleg_gryb@yahoo.com> wrote:

> From: Oleg Gryb <oleg_gryb@yahoo.com>
> Subject: Re: [xacml-users] does XACML v2 allow multiple values' attribute
> To: xacml-users@lists.oasis-open.org, "hao chen" <d95776@yahoo.com>
> Date: Friday, January 9, 2009, 3:31 PM
> OK, thanks, I'll try it later today and let you know
> about the results.
> 
> 
> --- On Fri, 1/9/09, hao chen <d95776@yahoo.com>
> wrote:
> 
> > From: hao chen <d95776@yahoo.com>
> > Subject: Re: [xacml-users] does XACML v2 allow
> multiple values' attribute
> > To: xacml-users@lists.oasis-open.org, oleg@gryb.info
> > Date: Friday, January 9, 2009, 4:28 PM
> > The attached are the policies and request I am using:
> > 
> > 
> > Best Regard
> > 
> > 
> > --- On Fri, 1/9/09, Oleg Gryb
> <oleg_gryb@yahoo.com>
> > wrote:
> > 
> > > From: Oleg Gryb <oleg_gryb@yahoo.com>
> > > Subject: Re: [xacml-users] does XACML v2 allow
> > multiple values' attribute
> > > To: xacml-users@lists.oasis-open.org,
> d95776@yahoo.com
> > > Date: Friday, January 9, 2009, 2:48 PM
> > > ... if you send your Policy to me, I can try it
> with
> > > XACMLight. Request seems to be correct from XSD
> point
> > of
> > > view.
> > > 
> > > 
> > > --- On Fri, 1/9/09, hao chen
> <d95776@yahoo.com>
> > > wrote:
> > > 
> > > > From: hao chen <d95776@yahoo.com>
> > > > Subject: [xacml-users] does XACML v2 allow
> > multiple
> > > values' attribute
> > > > To: xacml-users@lists.oasis-open.org
> > > > Date: Friday, January 9, 2009, 3:38 PM
> > > > Hi,
> > > > 
> > > > I use sun xacml implementation. When I use
> > multiple
> > > > values' attribute, I got the following
> error:
> > > > Exception in thread "main"
> > > > com.sun.xacml.ParsingException: Too many
> values
> > in
> > > Attribute
> > > > 
> > > > The request is as
> > > > <Request>
> > > >   <Subject
> > > >
> > >
> >
> SubjectCategory="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject">
> > > >     <Attribute
> > > >
> > >
> >
> AttributeId="urn:oasis:names:tc:xacml:2.0:subject:role"
> > > >
> > >
> >
> DataType="http://www.w3.org/2001/XMLSchema#anyURI";>
> > > >    
> > > >
> > >
> >
> <AttributeValue>account:manager:role</AttributeValue>
> > > >    
> > > >
> > >
> >
> <AttributeValue>card:member:department:manager:role</AttributeValue>
> > > >     </Attribute>
> > > >   </Subject>
> > > >   <Resource>
> > > >     <Attribute
> > > >
> > >
> >
> AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id"
> > > >
> > >
> >
> DataType="http://www.w3.org/2001/XMLSchema#string";>
> > > >    
> > > >
> > >
> >
> <AttributeValue>AccountInformation</AttributeValue>
> > > >     </Attribute>
> > > >   </Resource>
> > > >   <Action>
> > > >     <Attribute
> > > >
> > >
> >
> AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id"
> > > >
> > >
> >
> DataType="http://www.w3.org/2001/XMLSchema#string";>
> > > >    
> > >
> <AttributeValue>access</AttributeValue>
> > > >     </Attribute>
> > > >   </Action>
> > > > </Request>
> > > > 
> > > > The sun's java doc says only one value
> is
> > allowed
> > > for a
> > > > attribute.
> > > > 
> > > > hao
> > > > 
> > > > 
> > > >       
> > > > 
> > > >
> > >
> >
> ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail:
> > > > xacml-users-unsubscribe@lists.oasis-open.org
> > > > For additional commands, e-mail:
> > > > xacml-users-help@lists.oasis-open.org
> > 
> > 
> >      
> >
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail:
> > xacml-users-unsubscribe@lists.oasis-open.org
> > For additional commands, e-mail:
> > xacml-users-help@lists.oasis-open.org


<Request>
  <Subject SubjectCategory="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject">
    <Attribute AttributeId="urn:oasis:names:tc:xacml:2.0:subject:role" DataType="http://www.w3.org/2001/XMLSchema#anyURI";>
    <AttributeValue>account:manager:role</AttributeValue>
    <AttributeValue>card:member:department:manager:role</AttributeValue>
    </Attribute>
  </Subject>
  <Resource>
    <Attribute AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id" DataType="http://www.w3.org/2001/XMLSchema#string";>
    <AttributeValue>AccountInformation</AttributeValue>
    </Attribute>
  </Resource>
  <Action>
    <Attribute AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id" DataType="http://www.w3.org/2001/XMLSchema#string";>
    <AttributeValue>access</AttributeValue>
    </Attribute>
  </Action>
</Request>