Re: [xacml] [Model] Re: Composition Use Case

[Rich Salz <rsalz@zolera.com>]

> I don't think the language syntax itself can handle the matching
> rules for real-world sets of attributes.  I think the language
> must have a way of pointing to executables for handling the
> matching.

Something like the DSIG Transforms element?
	<tns:match tns:algorithm="qname">
		data of the "pattern" to match
	</tns:match>
Makes sense.  We could then define standard ones such as perl/xmlschema
regexps, X.509 rules, etc.
-- 
Zolera Systems, Your Key to Online Integrity
Securing Web services: XML, SOAP, Dig-sig, Encryption
http://www.zolera.com