xacml extension points proposal.
Polar pointed out that previous xacml extension
proposal is somewhat misleading with it's use of
@MustUnderstand attribute and where parameters
are interpreted.
Here is cleaned up version,
hopefully.
Proposal:
Allow element of type
<xacml:CombinerParametersType> as an optional child of
<xacml:PolicySet> and <xacml:Policy> elements.
<xacml:CombinerParameters> element contains a list of parameters
specific to the enclosing combining algorithm. Combiner parameters are input
to the combining algorithm only and can
not be directly interpreted by the pdp.
Schema:
<xs:element name="CombinerParameters"
type="xacml:CombinerParametersType"/>
<xs:complexType
name="CombinerParametersType">
<xs:sequence>
<xs:element
ref="xacml:CombinerParameter" minOccurs="0"
maxOccurs="unbounded"/>
</xs:sequence>
</xs:complexType>
<!-- -->
<xs:element
name="CombinerParameter"
type="xacml:CombinerParameterType"/>
<xs:complexType
name="CombinerParameterType">
<xs:sequence>
<xs:any
namespace="##any" processContents="lax" minOccurs="0"
maxOccurs="unbounded"/>
</xs:sequence>
<xs:attribute name="ParameterName" type="string"
use="required"/>
</xs:complexType>
Simon