[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]
Subject: Re: [xacml] IsPresent semantics
Do we need to put this description somewhere, or can we refer to it as "QName equality"? On Tue, 29 Oct 2002, Simon Godik wrote: > > Q: What about QName equality? See match on DataType. > > QName evaluates into expanded name which is a pair: (URI, local_name). > Expanded name MUST be used in all operations involving DataType attribute of > the xacml:AttributeDesignator, > xacml:AttributeSelector, xacml:AttributeValue, and xacml-context:Attribute. > Two QNames are considered equal iff URI portion of expanded names are equal, > and local_name portions > of the expanded names are equal. > > Simon > > ----- Original Message ----- > From: "Polar Humenn" <polar@syr.edu> > To: "XACML" <xacml@lists.oasis-open.org> > Sent: Tuesday, October 29, 2002 10:26 AM > Subject: [xacml] IsPresent semantics > > > > > > I'm writing up the semantics for the *IsPresent elements, and I want your > > immediate feed back for this ResourceAttributeIsPresent text, as the other > > elements will just probably be a cut and paste of it with the names > > changed. > > > > Note, that this text should also apply to the *AttributeDesignator > > elements as well, as they are close counterparts. > > > > Q: What about QName equality? See match on DataType. > > > > > > > > 5.1.x Element <ResourceAttributeIsPresent> > > > > The <ResourceAttributeIsPresent> element SHALL result in true if the > > named resource attribute can be located from within the <Resource> > > element of the <xacml-context:Request> element. A result of true SHALL > > mean that an <ResourceAttributeDesignator> element for this named > > attribute will return a bag consisting of at least one attribute value. > > The MustBePresent attribute governs whether this element returns false > > or indeterminate in the case of finding no value for the named attribute > > in the request context. In this case, if the MustBePresent attribute is > > set to false, which is its default value, this element SHALL result in > > false. However, for this case, if the MustBePresent attribute is set to > > true, the expression SHALL result in indeterminate. Regardless of the > > MustBePresent attribute, if it cannot be determined whether the > > attribute is present or not present in the request context, or the value > > of the attribute is unavailable, then the expression SHALL result in > > indeterminate. > > > > A resource attribute SHALL be considered present if at least one > > attribute exists within the <Resource> in the <xacml-context:Request> > > element that matches the values of their corresponding AttributeId, > > DataType, and Issuer attributes. The AttributeId attribute MUST match, > > by string equality on the URIs, that of the AttributeId attribute of the > > <xacml-context:Attribute> element. The DataType attribute MUST match, by > > string [Qname?] equality, that of the DataType attribute of the same > > <xacml-context:Attribute> element. If the Issuer attribute of this > > <ResourceAttributeIsPresent> element is supplied, it MUST match, by > > string equality, the Issuer attribute of the same > > <xacml-context:Attribute> element. If the Issuer attribute of this > > <ResourceAttributeIsPresent> element is not supplied, presence SHALL be > > governed by AttributeId and DataType attributes alone, regardless of the > > Issuer attribute of the same <xacml-context:Attribute> element even if > > the Issuer attribute is not supplied in the located > > <xacml-context:Attribute> element. > > > > The <ResourceAttributeIsPresent> MAY be passed to the <Apply> element as > > an argument. > > > > <xs:element name="ResourceAttributeIsPresent" > > type="xacml:AttributeDesignatorType"/> > > > > The <ResourceAttributeIsPresent> element is of the > > AttributeDesignatorType complex type. > > > > The <ResourceAttributeIsPresent> element has the following attributes: > > > > AttributeId [Required] > > > > This attribute SHALL specify the AttributeId of which to match the > > attribute. > > > > DataType [Required] > > > > This attribute SHALL specify the DataType of which to match the > > attribute. > > > > Issuer [Optional] > > > > This attribute, if supplied, SHALL specify the Issuer of which to > > match the attribute. > > > > MustBePresent [Optional] > > > > This attribute, if set to "false," specifies that this element SHALL > > result in false if no matching attributes can be found. This > > attribute, if set to "true," specifies that this element SHALL > > result in indeterminate if no matching attributes can be found. If > > this attribute is not supplied, its default value SHALL be "false". > > > > > > > > ---------------------------------------------------------------- > > To subscribe or unsubscribe from this elist use the subscription > > manager: <http://lists.oasis-open.org/ob/adm.pl> > > > > > > > > > ---------------------------------------------------------------- > To subscribe or unsubscribe from this elist use the subscription > manager: <http://lists.oasis-open.org/ob/adm.pl> >
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [Elist Home]
Powered by eList eXpress LLC