Maybe I mean samples, not tests. When I first tried to implement RBAC, I
took samples from the document, and they didn't work. It took some time
to make them loadable and work with SunXACML. I thought that having
those samples as policy XML docs would help implementors.
Argyn
> -----Original Message-----
> From: Anne Anderson [mailto:]
> Sent: Wednesday, September 29, 2004 10:00 AM
> To: Kuketayev, Argyn
> Cc:
> Subject: RE: [xacml-dev] XACML 2
>
>
> There are no plans. The RBAC profile has not yet been
> approved as a CD.
>
> It would be a test of how you implement your policy storage
> and retrieval mechanism, since the RBAC profile requires no
> changes or functional extensions to XACML. It is strictly a
> "profile" or paradigm for XACML usage.
>
> Can you suggest a conformance test that would be useful? The
> only thing I can think of is to pass in a Request containing
> a role attribute, having two Role PolicySets - one that
> applies and one that doesn't - and two Permission PolicySets
> - one for each role. The test would be verifying that only
> the applicable Permission PolicySet was applied. That is all
> standard XACML, so I don't think it is very useful.
>
> Anne
>
> On 29 September, Kuketayev, Argyn writes: RE: [xacml-dev]
> XACML 2 > From: "Kuketayev, Argyn"
> <> > To: ,
> > Subject: RE: [xacml-dev]
> XACML 2 > Date: Wed, 29 Sep 2004 09:38:03 -0400 >
> > Are there any plans to have conformance tests or samples
> for RBAC > profile?\ > Argyn >
> > > -----Original Message-----
> > > From: Anne Anderson [mailto:]
> > > Sent: Wednesday, September 29, 2004 9:31 AM
> > > To:
> > > Subject: RE: [xacml-dev] XACML 2
> > >
> > >
> > > On 28 September, Diego M. Gonzalez writes: RE: [xacml-dev]
> > > XACML 2 > I have finished the code that loads the policies
> > > and makes > difference for both versions. But I'll like to
> > > start with a > TDD environment for which I have to create
> > > some conformance > tests with the new schema and
> namespaces. >
> > > > Have you started with the conformance tests? Do you want
> > > to > use a common place to store them so any implementor can
> > > get > the tests, and provide feedback about them?
> > >
> > > Diego,
> > >
> > > The XACML TC has not discussed conformance tests for XACML
> > > 2.0. I have asked the chairs to put the topic on our agenda.
> > > Sun volunteered to do CTs for XACML 1.0, and IBM for XACML
> > > 1.1, but I don't know if IBM is interested in doing them for
> > > XACML 2.0. There is no requirement that a spec have CTs, but
> > > it certainly is valuable.
> > >
> > > Anne
> > > --
> > > Anne H. Anderson Email:
> > > Sun Microsystems Laboratories
> > > 1 Network Drive,UBUR02-311 Tel: 781/442-0928
> > > Burlington, MA 01803-0902 USA Fax: 781/442-1692
> > >
> > >
>
> --
> Anne H. Anderson Email:
> Sun Microsystems Laboratories
> 1 Network Drive,UBUR02-311 Tel: 781/442-0928
> Burlington, MA 01803-0902 USA Fax: 781/442-1692
>
>
