Re: Date comparison in XACML 2.0

I think I found the answer in the section "Match evaluation" ofÂhttp://www.oasis-open.org/committees/download.php/26986/access_control-xacml-2.0-core-spec-os-errata.doc :-)

Kind regards

Dmytro

Am Mo., 7. Juni 2021 um 17:25ÂUhr schrieb Dmytro Rud <dmytro.rud@gmail.com>:

Dear all

When the functions "urn:oasis:names:tc:xacml:1.0:function:date-less-than-or-equal" or "urn:oasis:names:tc:xacml:1.0:function:date-greater-than-or-equal" are used in an EnvironmentMatch element in a XACML 2.0 policy, e.g.:
<xacml:Environments>
  <xacml:Environment>
    <xacml:EnvironmentMatch MatchId="urn:oasis:names:tc:xacml:1.0:function:date-less-than-or-equal">
      <xacml:AttributeValue DataType="http://www.w3.org/2001/XMLSchema#date">2021-06-04</xacml:AttributeValue>>
      <xacml:EnvironmentAttributeDesignator AttributeId="urn:oasis:names:tc:xacml:1.0:environment:current-date" DataType="http://www.w3.org/2001/XMLSchema#date" MustBePresent="false"/>
    </xacml:EnvironmentMatch>
  </xacml:Environment>
</xacml:Environments>
what is the first argument of the function and what is the second?Â Will the above example result in a matchÂ
if the current date is less than or equal to 2021-06-04?
or if 2021-06-04 is less than or equal to the current date?

Thank you and kind regards
Dmytro

xacml-users message