Re: [xacml] XACML 3.0 and deprecated identifiers

[David Brossard <david.brossard@axiomatics.com>]

Neither 10.2.8 or A.3.12 explicitly mention the replacement / deprecation i.e. I have to assume that function-1.0-any-of is replaced with function-3.0-any-of. It is obvious but then again obvious is not always right, is it :-)

On Wed, Oct 11, 2017 at 12:10 AM, Steven Legg <steven.legg@viewds.com> wrote:

Hi David,

On 11/10/2017 12:42 AM, David Brossard wrote:

Hi

The XACML spec mentions that there are deprecated identifiers. There are 2 places where this happens:

  * 10.2.9 Identifiers planned for future deprecation
  * A.4 Functions, data types, attributes and algorithms planned for deprecation

Why do we have 2 sections? They are inconsistent.

I then compiled the 2 lists and came up with this table. You will notice that some of the identifiers do not have an explicit replacement. Why is that?

The replacements are listed in 10.2.8. The relationship between old and new is
implied for the dayTimeDuration-* and yearMonthDuration-* functions because these
functions are defined by the catch-all type-bag, type-bag-size, etc. functions.
The function definitions for all-of, any-of, any-of-any and map in A.3.12
explicitly use the new identifiers.

BTW, did you see Cyril's comments on the JSON profile?
https://lists.oasis-open.org/archives/xacml-comment/201709/msg00000.html

Regards,
Steven

Old     New
http://www.w3.org/TR/2002/WD-xquery-operators-20020816#dayTimeDuration  http://www.w3.org/2001/XMLSchema#dayTimeDuration
http://www.w3.org/TR/2002/WD-xquery-operators-20020816#yearMonthDuration        http://www.w3.org/2001/XMLSchema#yearMonthDuration
urn:oasis:names:tc:xacml:1.0:function:date-add-yearMonthDuration        urn:oasis:names:tc:xacml:3.0:function:date-add-yearMonthDuration
urn:oasis:names:tc:xacml:1.0:function:date-subtract-yearMonthDuration   urn:oasis:names:tc:xacml:3.0:function:date-subtract-yearMonthDuration
urn:oasis:names:tc:xacml:1.0:function:dateTime-add-dayTimeDuration      urn:oasis:names:tc:xacml:3.0:function:dateTime-add-dayTimeDuration
urn:oasis:names:tc:xacml:1.0:function:dateTime-add-yearMonthDuration    urn:oasis:names:tc:xacml:3.0:function:dateTime-add-yearMonthDuration
urn:oasis:names:tc:xacml:1.0:function:dateTime-subtract-dayTimeDuration         urn:oasis:names:tc:xacml:3.0:function:dateTime-subtract-dayTimeDuration
urn:oasis:names:tc:xacml:1.0:function:dateTime-subtract-yearMonthDuration       urn:oasis:names:tc:xacml:3.0:function:dateTime-subtract-yearMonthDuration
urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-equal     urn:oasis:names:tc:xacml:3.0:function:dayTimeDuration-equal
urn:oasis:names:tc:xacml:1.0:function:xpath-node-count  urn:oasis:names:tc:xacml:3.0:function:xpath-node-count
urn:oasis:names:tc:xacml:1.0:function:xpath-node-equal  urn:oasis:names:tc:xacml:3.0:function:xpath-node-equal
urn:oasis:names:tc:xacml:1.0:function:xpath-node-match  urn:oasis:names:tc:xacml:3.0:function:xpath-node-match
urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-equal   urn:oasis:names:tc:xacml:3.0:function:yearMonthDuration-equal
urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:deny-overrides  urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:deny-overrides
urn:oasis:names:tc:xacml:1.0:policy-combining-algorithm:permit-overrides        urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:permit-overrides
urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:deny-overrides    urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:deny-overrides
urn:oasis:names:tc:xacml:1.0:rule-combining-algorithm:permit-overrides  urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:permit-overrides
urn:oasis:names:tc:xacml:1.0:subject:authn-locality:dns-name    urn:oasis:names:tc:xacml:3.0:subject:authn-locality:dns-name
urn:oasis:names:tc:xacml:1.0:subject:authn-locality:ip-address  urn:oasis:names:tc:xacml:3.0:subject:authn-locality:ip-address
urn:oasis:names:tc:xacml:1.1:policy-combining-algorithm:ordered-deny-overrides  urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:ordered-deny-overrides
urn:oasis:names:tc:xacml:1.1:policy-combining-algorithm:ordered-permit-overrides        urn:oasis:names:tc:xacml:3.0:policy-combining-algorithm:ordered-permit-overrides
urn:oasis:names:tc:xacml:1.1:rule-combining-algorithm:ordered-deny-overrides    urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:ordered-deny-overrides
urn:oasis:names:tc:xacml:1.1:rule-combining-algorithm:ordered-permit-overrides  urn:oasis:names:tc:xacml:3.0:rule-combining-algorithm:ordered-permit-overrides
urn:oasis:names:tc:xacml:2.0:function:uri-string-concatenate    urn:oasis:names:tc:xacml:3.0:function:string-from-anyURI
urn:oasis:names:tc:xacml:1.0:function:all-of   
urn:oasis:names:tc:xacml:1.0:function:any-of   
urn:oasis:names:tc:xacml:1.0:function:any-of-any       
urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-at-least-one-member-of   
urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-bag       
urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-bag-size 
urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-intersection     
urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-is-in     
urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-one-and-only     
urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-set-equals       
urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-subset   
urn:oasis:names:tc:xacml:1.0:function:dayTimeDuration-union     
urn:oasis:names:tc:xacml:1.0:function:map       
urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-at-least-one-member-of 
urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-bag     
urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-bag-size       
urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-intersection   
urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-is-in   
urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-one-and-only   
urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-set-equals     
urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-subset 
urn:oasis:names:tc:xacml:1.0:function:yearMonthDuration-union   

--

David Brossard
VP of Customer Relations

+1 312 774-9163

+1 502 922 6538

+46(0)760 25 85 75
Axiomatics
525 W. Monroe Suite 2310
Chicago 60661

Support: https://support.axiomatics.com 
Web: http://www.axiomatics.com

Axiomatics Blog | Events | Resources, Webinars & Whitepapers

Connect with us on LinkedIn | Twitter | Google + | Facebook | YouTube