There are no plans. The RBAC profile has not yet been approved
as a CD.
It would be a test of how you implement your policy storage and
retrieval mechanism, since the RBAC profile requires no changes
or functional extensions to XACML. It is strictly a "profile" or
paradigm for XACML usage.
Can you suggest a conformance test that would be useful? The
only thing I can think of is to pass in a Request containing a
role attribute, having two Role PolicySets - one that applies and
one that doesn't - and two Permission PolicySets - one for each
role. The test would be verifying that only the applicable
Permission PolicySet was applied. That is all standard XACML, so
I don't think it is very useful.
Anne
On 29 September, Kuketayev, Argyn writes: RE: [xacml-dev] XACML 2
> From: "Kuketayev, Argyn" <>
> To: ,
> Subject: RE: [xacml-dev] XACML 2
> Date: Wed, 29 Sep 2004 09:38:03 -0400
>
> Are there any plans to have conformance tests or samples for RBAC
> profile?\
> Argyn
>
> > -----Original Message-----
> > From: Anne Anderson [mailto:]
> > Sent: Wednesday, September 29, 2004 9:31 AM
> > To:
> > Subject: RE: [xacml-dev] XACML 2
> >
> >
> > On 28 September, Diego M. Gonzalez writes: RE: [xacml-dev]
> > XACML 2 > I have finished the code that loads the policies
> > and makes > difference for both versions. But I'll like to
> > start with a > TDD environment for which I have to create
> > some conformance > tests with the new schema and namespaces. >
> > > Have you started with the conformance tests? Do you want
> > to > use a common place to store them so any implementor can
> > get > the tests, and provide feedback about them?
> >
> > Diego,
> >
> > The XACML TC has not discussed conformance tests for XACML
> > 2.0. I have asked the chairs to put the topic on our agenda.
> > Sun volunteered to do CTs for XACML 1.0, and IBM for XACML
> > 1.1, but I don't know if IBM is interested in doing them for
> > XACML 2.0. There is no requirement that a spec have CTs, but
> > it certainly is valuable.
> >
> > Anne
> > --
> > Anne H. Anderson Email:
> > Sun Microsystems Laboratories
> > 1 Network Drive,UBUR02-311 Tel: 781/442-0928
> > Burlington, MA 01803-0902 USA Fax: 781/442-1692
> >
> >
--
Anne H. Anderson Email:
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311 Tel: 781/442-0928
Burlington, MA 01803-0902 USA Fax: 781/442-1692
