OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

xacml-users message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: [xacml-users] does XACML v2 allow multiple values' attribute

Thanks for the clarification!

Yoichi Takayama, PhD
Senior Research Fellow
RAMP Project
MELCOE (Macquarie E-Learning Centre of Excellence)

Phone: +61 (0)2 9850 9073
Fax: +61 (0)2 9850 6527

This message is intended for the addressee named and may contain  
confidential information.  If you are not the intended recipient,  
please delete it and notify the sender. Views expressed in this  
message are those of the individual sender, and are not necessarily  
the views of Macquarie E-Learning Centre Of Excellence (MELCOE) or  
Macquarie University.

On 13/01/2009, at 4:51 AM, Seth Proctor wrote:

> Hi folks. Looks like I picked the wrong weekend to ignore my work  
> email..
>>> I believe the problem is that Sun's ref impl is based on XACML 1.1,
>>> where only a single AttributeValue was allowed in an Attribute  
>>> element.
>> Whew. That came as news to me. Indeed, section 6.7 of XACML 1.0 says
>> that an attribute can have "At most one attribute value". I had  
>> always
>> thought that multiple values had been there from the beginning.  
>> Thanks
>> for telling me that.
> The problem here is indeed that SunXACML has been updated to support  
> 2.0
> POLICIES but not REQUESTS or RESPONSES. In XACML 1.1 you're allowed to
> specify multiple values for the same attribute using different  
> Attribute
> elements, so this is what's currently supported. In XACML 2.0 the  
> standard
> was updated to support multiple values in the same Attribute element.
> For those using SunXACML, you can specify multiple values using  
> multiple
> Attribute elements (I know, a pain). Hopefully someone will update the
> request/response implementation at some point..
> seth
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: xacml-users-unsubscribe@lists.oasis-open.org
> For additional commands, e-mail: xacml-users-help@lists.oasis-open.org


[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]