RE: [xacml] wd-20 issues

[<remon.sinnema@emc.com>]

Erik/Rich,


From: Erik Rissanen [mailto:erik@axiomatics.com] 
Sent: Thursday, June 16, 2011 10:57 AM
To: xacml@lists.oasis-open.org
Subject: Re: [xacml] wd-20 issues

My understanding was the following:


7.7 Target evaluation 
    "An empty target matches any request. Otherwise the target value SHALL be "Match" if all the AnyOf specified in the target match values in the request context." 
=> All the <AnyOf>s must match


5.6 Element<Target> 
	"For the parent of the<Target>  element to be applicable to the decision request, there MUST be at least one positive match between each<AnyOf>  element of the<Target>  element and the corresponding section of the<Request>  element." 
=> Any of the <AnyOf>s must match

This, however, is just my misreading: I got fooled by the "at least one" part. So I agree there is no issue, although maybe the wording could be a bit improved.


Thanks,
Ray