OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.


Help: OASIS Mailing Lists Help | MarkMail Help

xacml message

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]

Subject: Re: JSON Profile WD-14 Issues

Hi Steven,

See my comments inline:

On Mon, Aug 19, 2013 at 9:03 AM, Steven Legg <steven.legg@viewds.com> wrote:

Hi David,

I noticed some problems in working draft 14 of the JSON profile.

Section 5.2.2 mentions "Attributes" as one of the objects in a Result
object (which you have now called Category") and section 5.2.9 uses
"object" to refer to both the XML element and its corresponding JSON
representation. You should refer to the <Attributes> *element* and
the Category *object*.
I changed the phrasing to:
  • Attributes: this object is optional. It can be single-valued or an array of Category objects.
Category is now a link to the relevant section in the profile document.

Section 5.2.4 says "the StatusCode object may contain a sequence of
StatusCode objects". The XACML core says something similar, but the
associated XML Schema allows at most one child StatusCode element.
I've added an item on this to the wiki errata page. Assuming the XML
Schema is correct, a StatusCode object contains an optional
StatusCode object.
Regarding this, I followed the PDF rather than the XSD. In the PDF, it is stated that:
The <StatusCode> element contains a major status code value and an optional sequence of minor  status codes.
<xs:element name="StatusCode" type="xacml:StatusCodeType"/>  
<xs:complexType name="StatusCodeType">
  <xs:element ref="xacml:StatusCode" minOccurs="0"/>
  <xs:attribute name="Value" type="xs:anyURI" use="required"/>
The <StatusCode> element is of StatusCodeType complex type. 
The <StatusCode> element contains the following attributes and elements: 
Value [Required] 
See Section B.8 for a list of values. 
<StatusCode> [Any Number] 
Minor status code. This status code qualifies its parent status code.
In that respect, the JSON profile is in line with the XACML 3.0 PDF standard and I would rather keep it that way.

Section 5.2.6 refers to the Advice object, but it should be referring
to the ObligationOrAdvice object.
Yes, you are right. One of my developers actually emailed me that very point a week back. It's now fixed.


Thanks for spotting those. They are minor however and I don't want to disrupt the current process (unless the profile doesn't pass public review of course).

What do you think?

David Brossard, M.Eng, SCEA, CSTP
Product Manager
+46(0)760 25 85 75
Axiomatics AB
Skeppsbron 40
S-111 30 Stockholm, Sweden

[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]