RE: [xacml] URI match function

[Tim Moses <tim.moses@entrust.com>]

Daniel - My interest is in matching URLs with case-insensitive "scheme"
parts and "authority" parts that (potentially) contain a port-range
specification.  String-equal can't do that for you.  All the best.  Tim.

-----Original Message-----
From: Daniel Engovatov [mailto:dengovatov@bea.com] 
Sent: Thursday, June 17, 2004 5:03 PM
To: xacml@lists.oasis-open.org
Subject: RE: [xacml] URI match function


But we can already do such rules - in probably a more efficient manner, as
target is simpler to evaluate GRANT 
resource match:  (string-equal "/foo" resource_ancestors) 
condition: (string-match "*.html" resource-id)

Or maybe you can setup your system to use
Resource match: (Boolean-equal "true" is_static_page_flag) 
:)

Why more complexity, especially with functions used in target matching...

Daniel..

-----Original Message-----
From: Rich Salz [mailto:rsalz@datapower.com] 
Sent: Wednesday, June 16, 2004 4:10 PM
To: Tim Moses
Cc: 'Michiharu Kudoh'; 'xacml'
Subject: RE: [xacml] URI match function

> url-branch-match?


how about subtree instead of branch?  might be possible to have
	/foo/**/*.html
match all static web pages, e.g.

--
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html
XML Security Overview http://www.datapower.com/xmldev/xmlsecurity.html


To unsubscribe from this mailing list (and be removed from the roster of the
OASIS TC), go to
http://www.oasis-open.org/apps/org/workgroup/xacml/members/leave_workgro
up.php.


To unsubscribe from this mailing list (and be removed from the roster of the
OASIS TC), go to
http://www.oasis-open.org/apps/org/workgroup/xacml/members/leave_workgroup.p
hp.