[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [xacml] Clarification of text in 3.0
Section 7.7 says
An empty target matches any request. Otherwise the target value SHALL be "Match" if all the AnyOf
specified in the target match values in the request context. Otherwise, if any one of the AnyOf specified
in the target is "No Match", then the target SHALL be "No Match".
But the example in section 4.2.4.4 says
The <AnyOf> element contains two <AllOf> elements, each of which contains one <Match>
element. The target matches if the action identified in the request context matches either of the action
match criteria.
The example corresponds to the common-sense meaning of "AnyOf" while the text in 7.7 does not. Should 7.7 read this way instead?
An empty target matches any request. Otherwise the target value SHALL be "Match" if any of the AnyOf
specified in the target match values in the request context. Otherwise, if all of the AnyOf specified
in the target is "No Match", then the target SHALL be "No Match".
---------------------------------------------------------------------
To unsubscribe from this mail list, you must leave the OASIS TC that
generates this mail. Follow this link to all your TCs in OASIS at:
https://www.oasis-open.org/apps/org/workgroup/portal/my_workgroups.php
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]