Subject: Re: [xacml] Possible issue or editorial cleanup item - missing equalitypredicates, etc.
Hi Rich, I think we discussed this some time ago. It's intentional since there are pattern matching functions instead. And, yes, I also pointed out that this means that the set functions are not defined for those data types because of this, but I think this was not seen as a problem. I don't recall the details of the discussion though, so I might be mistaken. I don't understand your last question. Best regards, Erik Rich.Levinson wrote: > There are no equality predicates in section A.3.1 for the following > datatypes: > > * urn:oasis:names:tc:xacml:2.0:data-type:ipAddress > * urn:oasis:names:tc:xacml:2.0:data-type:dnsName > * urn:oasis:names:tc:xacml:3.0:data-type:xpathExpression > > I don't know if this was intentional, but suspect it was just an > oversight as these 3 data types were added after XACML 1.1. > > Also, it appears some or all of them may be missing from some functions: > > * intersection > * at-least-one-member-of > * union > * subset > * set-equal > > Also, I am curious what, if any, association might or might not be > intended between the first two above and the Subject identifiers: > > * urn:oasis:names:tc:xacml:1.0:subject:authn-locality:ip-address > * urn:oasis:names:tc:xacml:2.0:data-type:dnsName > > > Thanks, > Rich >