Re: [xacml] proposal for action-id, subject-id, and required Attributes

[Anne Anderson <Anne.Anderson@Sun.com>]

On 3 September, Polar Humenn writes: Re: [xacml] proposal for action-id, subject-id, and required Attributes
 > Anne, again, just requiring the Subject to have "one other" attribute,
 > which is "typically" the "subject-id", doesn't really buy you much.
 > 
 > I suggest that we should take a stance of being consistent across all
 > subjects, actions, and resources. For each, either that no attributes are
 > guarranteed to be there, or they all have at least one attribute available
 > and we know explicitly what that attribute is.

I vote for "no attributes are guaranteed to be there".  I do not
care whether we make minOccurs=0 or 1, although I think we can
eliminate some meaningless cases by requiring at least 1, even if
we do not specify which one that is.

Anne
-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692