OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

xacml message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: item "G" alternative: indexing hints

Item "G" aims to solve indexing problem by creating new element in the rule head.
A simple alternative would be to provide indexing hints in the Policy element.
We can define IndexingHints element as a child of the Policy element.
It would contain a sequence of attribute designators for indexing.
<xs:complexType name="IndexingHintsType">
<xs:sequence minOccurs="0" maxOccurs="unbounded">
        <xs:element ref="xacml:SubjectAttributeDesignator"/>
        <xs:element ref="xacml:ResourceAttributeDesignator"/>
        <xs:element ref="xacml:ActionAttributeDesignator"/>
        <xs:element ref="xacml:EnvironmentAttributeDesignator"/>
<Policy ...>
        <SubjectAttributeDesignator AttributeId="group" .../>
        <ActionAttributeDesignator AttributeId="read" .../>
        <EnvironmentAttributeDesignator AttributeId="purpose" .../>
If rule contains indexable expression on an attribute specified in the indexing hints, rule MAY be indexed.
Indexing rules is not a MUST, ie if xacml processor does not index rules it is still compliant (but not very fast) processor.

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]