If you want to extend XACML functions to use XQuery, you will have to do
it yourself. There is no direct mapping, as XQuery/XPath data model is
not directly compatible with XACML data model. This is done on purpose
as XACML
Data model is designed to accommodate a broader ranger of data sources
then XML.
If you write a custom function that does XQuery or XLST transformation
to return XACML attribute value to be used in a rule, you can pass the
actual query code as a string literal attribute. You will also need to
address how do you provide prolog data and XQuery context, but this is
completely outside of XACML implementation.
Daniel;
-----Original Message-----
From: Muhammad Masoom Alam [mailto:]
Sent: Wednesday, December 08, 2004 11:14 AM
To: Daniel Engovatov;
Cc: Seth Proctor;
Subject: Re: [sunxacml-discuss] RE: Use of Xquery with XACML
Dear ,
and if the authorization system(PDP) itself wants to use Xquery to make
a
decision for a resource (XML data / or any resource) , where this Xquery
is
going to be stored, how Authorization System is going to reference this
Xquery as currently there is no support for Xquery and very limited
support
for Xpath as well.
Regards
Muhammad.
