Re: [xacml-users] Single request to query multiple resources with multiple actions on each resource

[Oleg Gryb <oleg_gryb@yahoo.com>]

Andy,

You can use multiple resources in a request and will get multiple decisions (one for each resource) in a response, but I'm not aware about a mechanism in XACML 2.0 that would allow to use different actions for each resource.

Please also notice that XACMLight doesn't use sun-xacml library and is an independent implementation.

I also think that sun-xacml's 2.0 implementation doesn't support multiple resources in a request and multiple decisions in a response at all (Seth, please let me know if this changed).

Thanks,
Oleg.

--- On Tue, 9/22/09, Ludwig Seitz <ludwig@axiomatics.com> wrote:

> From: Ludwig Seitz <ludwig@axiomatics.com>
> Subject: Re: [xacml-users] Single request to query multiple resources with multiple actions on each resource
> To: "Andy Bailey" <andy@hazlorealidad.com>
> Cc: "xacml-users" <xacml-users@lists.oasis-open.org>
> Date: Tuesday, September 22, 2009, 10:17 AM
> On Tue, 2009-09-22 at 08:47 -0500,
> Andy Bailey wrote:
> > Hello, 
> > 
> > This is my first post on the mailing list and I only
> discovered xacml
> > this week, so please be tolerant if I ask questions
> with obvious
> > answers.
> > 
> > I have searched through the xacml 2.0 spec for the
> capabilities to do
> > the following:
> 
> As far as I know what you are trying to do is not possible
> with 
> XACML 2.0 and the 2.0 Multiple Resource profile.
> 
> What you would need is XACML 3.0 and the corresponding
> Multiple
> Resources profile. There you can do exactly what you where
> describing
> (i.e. multiple Resource elements _and_ multiple Action
> elements in a
> Request).
> 
> As XACML 3.0 isn't finalized yet, there are not many
> implementations
> available. 
> 
> 
> Now for the shameless plug:
> 
> AFAIK we (Axiomatics) are currently the only providers of
> an XACML 3.0
> implementation (including the Multiple Resource Profile for
> 3.0).
> 
> Hope it helps,
> 
> Ludwig Seitz
> 
> 
> -- 
> Ludwig Seitz, PhD         
>    |   Axiomatics AB
> Training & Development       
> |   Electrum 223
> Phone: +46 (0)760 44 22 91   
> |   S-164 40 Kista, Sweden
> Mail: ludwig@axiomatics.com   |
>