[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: Re: [xacml] Entity... Category... Attributes - JSON profile
Hi David, Sometimes these details take a while to come into focus. In this case, since you are looking to change "Attributes" to something and have picked Category, for consistency w CategoryId, I would like to point out what I consider a non-trivial issue w this choice. (And since you are planning updates anyway, it will give another chance to reconsider :) ) https://lists.oasis-open.org/archives/xacml/201307/msg00006.html The issue is that the use of CategoryId in the current spec is a semantic referring to how to interpret the collection of attributes. i.e. it says what "type" of collection it is, but it does not say anything about any specific instance of that collection type. Therefore, naming the collection "Category" in the top element, and then identifying the Category-Type using CategoryId is a bit unusual because id-like attributes are generally used to identify specific instances of the content as opposed to the type of content. One example that comes to mind is the SAML <Assertion> element, that has an AssertionId attribute. This attribute is used to identify the specific instance of the Assertion and is not saying anything about the type of assertion. I know this example is dated and the community is now using the xml id construct, but the point is that id generally refers to the content, whether appl-specific or xml general. Using <Category CategoryId=xxx ...> I think is missing the point that it is the content itself that needs to be interpreted using the specific Category type identified in the top element. This does not to me indicate that there is any semantic value in calling the top level element, "Category", as category is only one possible metadata aspect of the collection. Possibly, we would one day add an "IssuerID" to the top level to identify the entity that created the collection as opposed to the individual attributes. Then we would have to choose whether to call the top element either Category or Issuer, neither of which makes particular sense to me. In any event, as indicated yesterday, I don't want to hold up the profile by trying to use it to correct a flaw in the core spec, but I think the name of the top level element could be anything and Category may or may not be the best choice given that we are only not constraining it to the "Attributes" choice, that unfortunately is in the core spec. Therefore, I will defer to your judgement as to what to do, but wanted to register my comment on the current state. Thanks, Rich On 7/3/2013 3:53 AM, David Brossard
wrote:
--
Thanks, Rich
|
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]