Re: [xacml] XACML 3.0 and deprecated identifiers

[Steven Legg <steven.legg@viewds.com>]

Hi David,

On 11/10/2017 12:42 AM, David Brossard wrote:
> Hi
>
> The XACML spec mentions that there are deprecated identifiers. There are 2 places where this happens:
>
>   * 10.2.9 Identifiers planned for future deprecation
>   * A.4 Functions, data types, attributes and algorithms planned for deprecation
>
> Why do we have 2 sections? They are inconsistent.
>
> I then compiled the 2 lists and came up with this table. You will notice that some of the identifiers do not have an explicit replacement. Why is that?

The replacements are listed in 10.2.8. The relationship between old and new is
implied for the dayTimeDuration-* and yearMonthDuration-* functions because these
functions are defined by the catch-all type-bag, type-bag-size, etc. functions.
The function definitions for all-of, any-of, any-of-any and map in A.3.12
explicitly use the new identifiers.

BTW, did you see Cyril's comments on the JSON profile?
https://lists.oasis-open.org/archives/xacml-comment/201709/msg00000.html

Regards,
Steven

> Old 	New
> http://www.w3.org/TR/2002/WD-xquery-operators-20020816#dayTimeDuration 	http://www.w3.org/2001/XMLSchema#dayTimeDuration
> http://www.w3.org/TR/2002/WD-xquery-operators-20020816#yearMonthDuration 	http://www.w3.org/2001/XMLSchema#yearMonthDuration
> urn:oasis:names:tc:xacml:1.0:function:date-add-yearMonthDuration 	urn:oasis:names:tc:xacml:3.0:function:date-add-yearMonthDuration
> urn:oasis:names:tc:xacml:1.0:function:date-subtract-yearMonthDuration 	urn:oasis:names:tc:xacml:3.0:function:date-subtract-yearMonthDuration
> urn:oasis:names:tc:xacml:1.0:function:dateTime-add-dayTimeDuration 	urn:oasis:names:tc:xacml:3.0:function:dateTime-add-dayTimeDuration
> urn:oasis:names:tc:xacml:1.0:function:dateTime-add-yearMonthDuration 	urn:oasis:names:tc:xacml:3.0:function:dateTime-add-yearMonthDuration
> urn:oasis:names:tc:xacml:1.0:function:dateTime-subtract-dayTimeDuration 	urn:oasis:names:tc:xacml:3.0:function:dateTime-subtract-dayTimeDuration
> urn:oasis:names:tc:xacml:1.0:function:dateTime-subtract-yearMonthDuration 	urn:oasis:names:tc:xacml:3.0:function:dateTime-subtract-yearMonthDuration
> urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-equal 	urn:oasis:names:tc:xacml:3.0:function:dayTimeDuration-equal
> urn:oasis:names:tc:xacml:1.0:function:xpath-node-count 	urn:oasis:names:tc:xacml:3.0:function:xpath-node-count
> urn:oasis:names:tc:xacml:1.0:function:xpath-node-equal 	urn:oasis:names:tc:xacml:3.0:function:xpath-node-equal
> urn:oasis:names:tc:xacml:1.0:function:xpath-node-match 	urn:oasis:names:tc:xacml:3.0:function:xpath-node-match
> urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-equal 	urn:oasis:names:tc:xacml:3.0:function:yearMonthDuration-equal
> urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides 	urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:deny-overrides
> urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:permit-overrides 	urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:permit-overrides
> urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides 	urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:deny-overrides
> urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides 	urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:permit-overrides
> urn:oasis:names:tc:xacml:1.0:subject:authn-locality:dns-name 	urn:oasis:names:tc:xacml:3.0:subject:authn-locality:dns-name
> urn:oasis:names:tc:xacml:1.0:subject:authn-locality:ip-address 	urn:oasis:names:tc:xacml:3.0:subject:authn-locality:ip-address
> urn:oasis:names:tc:xacml:1.1:policy-combining-algorithm:ordered-deny-overrides 	urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:ordered-deny-overrides
> urn:oasis:names:tc:xacml:1.1:policy-combining-algorithm:ordered-permit-overrides 	urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:ordered-permit-overrides
> urn:oasis:names:tc:xacml:1.1:rule-combining-algorithm:ordered-deny-overrides 	urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:ordered-deny-overrides
> urn:oasis:names:tc:xacml:1.1:rule-combining-algorithm:ordered-permit-overrides 	urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:ordered-permit-overrides
> urn:oasis:names:tc:xacml:2.0:function:uri-string-concatenate 	urn:oasis:names:tc:xacml:3.0:function:string-from-anyURI
> urn:oasis:names:tc:xacml:1.0:function:all-of 	
> urn:oasis:names:tc:xacml:1.0:function:any-of 	
> urn:oasis:names:tc:xacml:1.0:function:any-of-any 	
> urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-at-least-one-member-of 	
> urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-bag 	
> urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-bag-size 	
> urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-intersection 	
> urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-is-in 	
> urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-one-and-only 	
> urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-set-equals 	
> urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-subset 	
> urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-union 	
> urn:oasis:names:tc:xacml:1.0:function:map 	
> urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-at-least-one-member-of 	
> urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-bag 	
> urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-bag-size 	
> urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-intersection 	
> urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-is-in 	
> urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-one-and-only 	
> urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-set-equals 	
> urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-subset 	
> urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-union