OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

xacml message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Bug in conformance test?


The policy for test IIA002 [1] doesn't specify MustBePresent for the urn:oasis:names:tc:xacml:1.0:example:attribute:role attribute. According to section 7.2.5. Attribute Retrieval of the 2.0 spec, the default value for MustBePresent is "False", and therefore an empty bag should be returned for the attribute value. This will result in the one rule not matching and therefore a decision of NotApplicable. 

However, the expected response [2] is Permit, since the purpose of the test is to invoke the PIP [3].

I think this is a bug in the policy that should be fixed by adding MustBePresent="True".


[1] http://tools.oasis-open.org/version-control/svn/xacml/current/tests/IIA002Policy.xml
[2] http://tools.oasis-open.org/version-control/svn/xacml/current/tests/IIA002Response.xml
[3] http://tools.oasis-open.org/version-control/svn/xacml/current/tests/IIA002Special.txt

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]