12 messages in org.oasis-open.lists.xacmlRE: [xacml] wd-20 issues| From | Sent On | Attachments |
|---|---|---|
| Paul Tyson | May 26, 2011 9:47 am | |
| Erik Rissanen | May 30, 2011 7:58 am | |
| Tyson, Paul H | May 31, 2011 6:07 am | |
| Erik Rissanen | May 31, 2011 7:57 am | |
| Tyson, Paul H | May 31, 2011 8:39 am | |
| remo...@emc.com | Jun 6, 2011 10:08 pm | |
| Erik Rissanen | Jun 9, 2011 2:26 am | |
| remo...@emc.com | Jun 10, 2011 12:51 am | |
| Erik Rissanen | Jun 15, 2011 4:11 am | |
| rich levinson | Jun 15, 2011 10:50 pm | |
| Erik Rissanen | Jun 16, 2011 1:56 am | |
| remo...@emc.com | Jun 16, 2011 2:10 am |
| Subject: | RE: [xacml] wd-20 issues | |
|---|---|---|
| From: | remo...@emc.com (remo...@emc.com) | |
| Date: | Jun 16, 2011 2:10:04 am | |
| List: | org.oasis-open.lists.xacml | |
Erik/Rich,
From: Erik Rissanen [mailto:er...@axiomatics.com] Sent: Thursday, June 16, 2011 10:57 AM To: xac...@lists.oasis-open.org Subject: Re: [xacml] wd-20 issues
My understanding was the following:
7.7 Target evaluation
"An empty target matches any request. Otherwise the target value SHALL be
"Match" if all the AnyOf specified in the target match values in the request
context."
=> All the <AnyOf>s must match
5.6 Element<Target>
"For the parent of the<Target> element to be applicable to the decision
request, there MUST be at least one positive match between each<AnyOf> element
of the<Target> element and the corresponding section of the<Request> element."
=> Any of the <AnyOf>s must match
This, however, is just my misreading: I got fooled by the "at least one" part.
So I agree there is no issue, although maybe the wording could be a bit
improved.
Thanks, Ray