Re: [xacml] Groups - Changes Since XACML 1.0(xacml_1.x_2.0_diffs_draft.doc) uploaded

[Anne Anderson <Anne.Anderson@sun.com>]

Daniel,

The DataType "xpath-expression" is defined in the "Hierarchical resource
profile of XACML v2.0", but it is not in the XACML core specification.
The profile references XPath Version 1.0.

Could you clarify what you mean by "policy recombination algorithms"?
Is this just another term for "policy combining algorithms"?  Could you
give a concrete example of how XQuery would be used to express something
like Deny-Overrides?

Daniel Engovatov wrote:
>>7. Datatypes: there is no "xpath-expression" datatype.
> 
> 
> I suggest that depending on the timeline for XACML 3.0 we may redefine
> those types until Xpath2.0/XQuery reaches W3C recommendation phase.  It
> should enter candidate recommendation status on July meeting.
> 
> Many popular Xpath implementations are already 2.0.
> 
> That would be a good opportunity for us to revisit binding between
> Xpath/XQuery data model to XACML context anyway.
> 
> Other potential use for this standard is that XQuery is a rather natural
> language to use to express policy recombination algorithms - using XML
> representation for the rule evaluation results.  Standardizing on a
> language for recombination algorithms may make them more interoperable
> and easier to extend.
> 
> Daniel;
> 
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe from this mail list, you must leave the OASIS TC that
> generates this mail.  You may a link to this group and all your TCs in OASIS
> at:
> https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php 
> 

-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692