Re: [xacml-users] does XACML v2 allow multiple values' attribute

[Yoichi Takayama <yoichi@melcoe.mq.edu.au>]

Thanks for the clarification!

Yoichi
--------------------------------------------------------------------------
Yoichi Takayama, PhD
Senior Research Fellow
RAMP Project
MELCOE (Macquarie E-Learning Centre of Excellence)
MACQUARIE UNIVERSITY

Phone: +61 (0)2 9850 9073
Fax: +61 (0)2 9850 6527
www.mq.edu.au
www.melcoe.mq.edu.au/projects/RAMP/
--------------------------------------------------------------------------
MACQUARIE UNIVERSITY: CRICOS Provider No 00002J

This message is intended for the addressee named and may contain  
confidential information.  If you are not the intended recipient,  
please delete it and notify the sender. Views expressed in this  
message are those of the individual sender, and are not necessarily  
the views of Macquarie E-Learning Centre Of Excellence (MELCOE) or  
Macquarie University.

On 13/01/2009, at 4:51 AM, Seth Proctor wrote:

>
> Hi folks. Looks like I picked the wrong weekend to ignore my work  
> email..
>
>>> I believe the problem is that Sun's ref impl is based on XACML 1.1,
>>> where only a single AttributeValue was allowed in an Attribute  
>>> element.
>>
>> Whew. That came as news to me. Indeed, section 6.7 of XACML 1.0 says
>> that an attribute can have "At most one attribute value". I had  
>> always
>> thought that multiple values had been there from the beginning.  
>> Thanks
>> for telling me that.
>
> The problem here is indeed that SunXACML has been updated to support  
> 2.0
> POLICIES but not REQUESTS or RESPONSES. In XACML 1.1 you're allowed to
> specify multiple values for the same attribute using different  
> Attribute
> elements, so this is what's currently supported. In XACML 2.0 the  
> standard
> was updated to support multiple values in the same Attribute element.
>
> For those using SunXACML, you can specify multiple values using  
> multiple
> Attribute elements (I know, a pain). Hopefully someone will update the
> request/response implementation at some point..
>
>
> seth
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: xacml-users-unsubscribe@lists.oasis-open.org
> For additional commands, e-mail: xacml-users-help@lists.oasis-open.org
>

smime.p7s