Re: [xacml] Delegation with open attribute categories

[Anne Anderson - Sun Microsystems <Anne.Anderson@sun.com>]

I know it is "messy", but would it make sense to try to support both 
formats, just for backwards compatibility?  I know we have specified an 
exact equivalence between each of the old category formats and a 
corresponding id for a new category, but would it be possible to 
actually support the old category formats in addition?

Just a thought and a question...

Regards,
Anne

Erik Rissanen wrote On 09/20/06 08:55,:
> All,
> 
> I have looked into how to map the delegation model in the new format
> with the open attribute categories. It turns out to work very well and
> the categories simplify the delegation specification a lot. Everything
> can be done with the normal matching rules and there is no need for any
> special delegation treatment, except for the process which generates the
> administrative requests. (I hope I am not overlooking anything here.)
> There is only one issue with indirect delegates. I have added issues
> 49-52 in the issues list to cover what I have done so far:
> 
> http://wiki.oasis-open.org/xacml/IssuesList
> 
> I suggest that, if people like this, I will update the delegation
> profile draft accordingly.
> 
> What I have done solves issue 33 (how to match any delegate), so if
> people like my proposals, we could close that issue.
> 
> Also, should we reopen issue 9, backwards compatibility? It is marked as
> closed since everything so far has been backwards compatible. The open
> categories are not directly backwards compatible, so that is not true
> anymore.
> 
> Best regards,
> Erik
> 
> 

-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692