[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]
Subject: Re: [xacml] IsPresent semantics
> Q: What about QName equality? See match on DataType. QName evaluates into expanded name which is a pair: (URI, local_name). Expanded name MUST be used in all operations involving DataType attribute of the xacml:AttributeDesignator, xacml:AttributeSelector, xacml:AttributeValue, and xacml-context:Attribute. Two QNames are considered equal iff URI portion of expanded names are equal, and local_name portions of the expanded names are equal. Simon ----- Original Message ----- From: "Polar Humenn" <polar@syr.edu> To: "XACML" <xacml@lists.oasis-open.org> Sent: Tuesday, October 29, 2002 10:26 AM Subject: [xacml] IsPresent semantics > > I'm writing up the semantics for the *IsPresent elements, and I want your > immediate feed back for this ResourceAttributeIsPresent text, as the other > elements will just probably be a cut and paste of it with the names > changed. > > Note, that this text should also apply to the *AttributeDesignator > elements as well, as they are close counterparts. > > Q: What about QName equality? See match on DataType. > > > > 5.1.x Element <ResourceAttributeIsPresent> > > The <ResourceAttributeIsPresent> element SHALL result in true if the > named resource attribute can be located from within the <Resource> > element of the <xacml-context:Request> element. A result of true SHALL > mean that an <ResourceAttributeDesignator> element for this named > attribute will return a bag consisting of at least one attribute value. > The MustBePresent attribute governs whether this element returns false > or indeterminate in the case of finding no value for the named attribute > in the request context. In this case, if the MustBePresent attribute is > set to false, which is its default value, this element SHALL result in > false. However, for this case, if the MustBePresent attribute is set to > true, the expression SHALL result in indeterminate. Regardless of the > MustBePresent attribute, if it cannot be determined whether the > attribute is present or not present in the request context, or the value > of the attribute is unavailable, then the expression SHALL result in > indeterminate. > > A resource attribute SHALL be considered present if at least one > attribute exists within the <Resource> in the <xacml-context:Request> > element that matches the values of their corresponding AttributeId, > DataType, and Issuer attributes. The AttributeId attribute MUST match, > by string equality on the URIs, that of the AttributeId attribute of the > <xacml-context:Attribute> element. The DataType attribute MUST match, by > string [Qname?] equality, that of the DataType attribute of the same > <xacml-context:Attribute> element. If the Issuer attribute of this > <ResourceAttributeIsPresent> element is supplied, it MUST match, by > string equality, the Issuer attribute of the same > <xacml-context:Attribute> element. If the Issuer attribute of this > <ResourceAttributeIsPresent> element is not supplied, presence SHALL be > governed by AttributeId and DataType attributes alone, regardless of the > Issuer attribute of the same <xacml-context:Attribute> element even if > the Issuer attribute is not supplied in the located > <xacml-context:Attribute> element. > > The <ResourceAttributeIsPresent> MAY be passed to the <Apply> element as > an argument. > > <xs:element name="ResourceAttributeIsPresent" > type="xacml:AttributeDesignatorType"/> > > The <ResourceAttributeIsPresent> element is of the > AttributeDesignatorType complex type. > > The <ResourceAttributeIsPresent> element has the following attributes: > > AttributeId [Required] > > This attribute SHALL specify the AttributeId of which to match the > attribute. > > DataType [Required] > > This attribute SHALL specify the DataType of which to match the > attribute. > > Issuer [Optional] > > This attribute, if supplied, SHALL specify the Issuer of which to > match the attribute. > > MustBePresent [Optional] > > This attribute, if set to "false," specifies that this element SHALL > result in false if no matching attributes can be found. This > attribute, if set to "true," specifies that this element SHALL > result in indeterminate if no matching attributes can be found. If > this attribute is not supplied, its default value SHALL be "false". > > > > ---------------------------------------------------------------- > To subscribe or unsubscribe from this elist use the subscription > manager: <http://lists.oasis-open.org/ob/adm.pl> > > >
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]
Powered by eList eXpress LLC