Re: [xacml-users] Hierarchical resources policy and request file

From
dhirendra sharma <>
Date
2006-07-04T19:50:08+00:00
ID
Thread
Re: [xacml-users] Hierarchical resources policy and request file
Hi Seth,

Where can i find detailed documentation about
different functions supported for 1.2 and 2.0 ?

I swicthed back to what Anne has suggested.The changed
request and policy xml files are attached.

changes in request.xml :
--------------
In the request.xml, the datatype of "subject-company"
attribute is changed to
http://www.w3.org/2001/XMLSchema#anyURI

and similarly datatype of resource-id of resource in
the request is changed to anyURI.

changes in policy.xml:
----------------------

	    <Apply
FunctionId="urn:oasis:names:tc:xacml:1.0:function:anyURI-is-in">
		  <SubjectAttributeDesignator 
		  	AttributeId="urn:namespace:subject-company" 
		  	DataType="xs:anyURI" />
		  <ResourceAttributeDesignator 
		  
AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id"
 
		  	DataType="xs:anyURI" />
	      	</Apply>
	  </Condition>
 
I get the below exception :
---------------------------------------------------
---------------------------------------------------

Jul 4, 2006 2:37:01 PM
com.sun.xacml.finder.impl.FilePolicyModule loadPolicy
WARNING: Error reading policy from file C:\sun
xacml\sunxacml-1.2\sample\policy\company_policy.xml
java.lang.NullPointerException
	at
com.sun.xacml.cond.Apply.getFunction(Apply.java:285)
	at
com.sun.xacml.cond.Apply.getInstance(Apply.java:206)
	at
com.sun.xacml.cond.Apply.getConditionInstance(Apply.java:170)
	at com.sun.xacml.Rule.getInstance(Rule.java:181)
	at com.sun.xacml.Policy.<init>(Policy.java:215)
	at com.sun.xacml.Policy.getInstance(Policy.java:237)
	at
com.sun.xacml.finder.impl.FilePolicyModule.loadPolicy(FilePolicyModule.java:321)
	at
com.sun.xacml.finder.impl.FilePolicyModule.init(FilePolicyModule.java:218)
	at
com.sun.xacml.finder.PolicyFinder.init(PolicyFinder.java:141)
	at com.sun.xacml.PDP.<init>(PDP.java:107)
	at SimplePDP.<init>(SimplePDP.java:211)
	at SimplePDP.main(SimplePDP.java:312)

---------------------------------------------------
---------------------------------------------------


Thanks,
Dhirendra Sharma


--- Seth Proctor <> wrote:

> 
> Hi Dhirendra. The problem is that your Condition
> function (string-is- 
> in) takes a bag and a string, but you've passed it
> two bags. Try  
> fixing that and let me know what happens.
> 
> 
> seth
> 
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com