xacml extension points (item 11)

["Simon Godik" <simon.godik@overxeer.com>]

Extension points in xacml policy proposal.

 

As suggested by Michiharu some time ago (http://lists.oasis-open.org/archives/xacml/200207/msg00166.html), we need extension points in xacml policy to specify "algorithm-local" parameters.

 

My proposal follows Michiharu's with small changes to the extension element type.

 

Proposal:

Allow element of type xacml:ParametersType as an optional child of xacml:PolicySet, xacml:Policy, xacml:Rule, and xacml:Obligations elements. If xacml:Parameters element is not empty, pdp must be able to process all xacml:Parameter elements. (Alternatives possible: 1 - pdp may ignore properties it does not understand, 2 - introduce MustUnderstand attribute to the xacml:Parameter element)

 

Schema:

<xs:element name="Parameters" type="xacml:ParametersType"/>
<xs:complexType name="ParametersType">
<xs:sequence>
<xs:element ref="xacml:Parameter" minOccurs="0" maxOccurs="unbounded"/>
</xs:sequence>
</xs:complexType>
<!-- -->
<xs:element name="Parameter" type="xacml:ParameterType"/>
<xs:complexType name="ParameterType">
<xs:sequence>
<xs:any namespace="##any" processContents="lax" minOccurs="0" maxOccurs="unbounded"/>
</xs:sequence>
<xs:attribute name="ParameterName" type="string" use="required"/>
</xs:complexType>