Groups - XACML v3.0 Dynamic Attribute Authority Version 1.0 uploaded

[Steven Legg<steven.legg@viewds.com>]

        Submitter's message
        Following on from the consensus of the recent TC conference call, I've changed the final processing so that dynamic attributes override attributes in the initial request instead of being merged, and I've added an informative section describing how to achieve effects different from the default final processing. I'm not planning any further additions to this draft profile.
        
-- Dr. Steven Legg

Document Name: XACML v3.0 Dynamic Attribute Authority Version 1.0

---

Description
This specification defines a new XACML system component, the Dynamic
Attribute Authority, which augments the request context of an XACML
authorization request with additional attributes and attribute values that
are generated on demand according to a set of rules. The rules are
expressed as XACML policies, use obligations to specify the additional
attributes and values, and are processed in the normal manner of a Policy
Decision Point. This means that a Dynamic Attribute Authority can be
readily constructed from existing XACML system components.
Download Latest Revision
Public Download Link

---

Submitter: Dr. Steven Legg
Group: OASIS eXtensible Access Control Markup Language (XACML) TC
Folder: Specifications and Working Drafts
Date submitted: 2021-09-28 22:09:40