OK, thanks, I'll try it later today and let you know about the results.
--- On Fri, 1/9/09, hao chen <> wrote:
> From: hao chen <>
> Subject: Re: [xacml-users] does XACML v2 allow multiple values' attribute
> To: ,
> Date: Friday, January 9, 2009, 4:28 PM
> The attached are the policies and request I am using:
>
>
> Best Regard
>
>
> --- On Fri, 1/9/09, Oleg Gryb <>
> wrote:
>
> > From: Oleg Gryb <>
> > Subject: Re: [xacml-users] does XACML v2 allow
> multiple values' attribute
> > To: ,
> > Date: Friday, January 9, 2009, 2:48 PM
> > ... if you send your Policy to me, I can try it with
> > XACMLight. Request seems to be correct from XSD point
> of
> > view.
> >
> >
> > --- On Fri, 1/9/09, hao chen <>
> > wrote:
> >
> > > From: hao chen <>
> > > Subject: [xacml-users] does XACML v2 allow
> multiple
> > values' attribute
> > > To:
> > > Date: Friday, January 9, 2009, 3:38 PM
> > > Hi,
> > >
> > > I use sun xacml implementation. When I use
> multiple
> > > values' attribute, I got the following error:
> > > Exception in thread "main"
> > > com.sun.xacml.ParsingException: Too many values
> in
> > Attribute
> > >
> > > The request is as
> > > <Request>
> > > <Subject
> > >
> >
> SubjectCategory="urn:oasis:names:tc:xacml:1.0:subject-category:access-subject">
> > > <Attribute
> > >
> >
> AttributeId="urn:oasis:names:tc:xacml:2.0:subject:role"
> > >
> >
> DataType="http://www.w3.org/2001/XMLSchema#anyURI">
> > >
> > >
> >
> <AttributeValue>account:manager:role</AttributeValue>
> > >
> > >
> >
> <AttributeValue>card:member:department:manager:role</AttributeValue>
> > > </Attribute>
> > > </Subject>
> > > <Resource>
> > > <Attribute
> > >
> >
> AttributeId="urn:oasis:names:tc:xacml:1.0:resource:resource-id"
> > >
> >
> DataType="http://www.w3.org/2001/XMLSchema#string">
> > >
> > >
> >
> <AttributeValue>AccountInformation</AttributeValue>
> > > </Attribute>
> > > </Resource>
> > > <Action>
> > > <Attribute
> > >
> >
> AttributeId="urn:oasis:names:tc:xacml:1.0:action:action-id"
> > >
> >
> DataType="http://www.w3.org/2001/XMLSchema#string">
> > >
> > <AttributeValue>access</AttributeValue>
> > > </Attribute>
> > > </Action>
> > > </Request>
> > >
> > > The sun's java doc says only one value is
> allowed
> > for a
> > > attribute.
> > >
> > > hao
> > >
> > >
> > >
> > >
> > >
> >
> ---------------------------------------------------------------------
> > > To unsubscribe, e-mail:
> > >
> > > For additional commands, e-mail:
> > >
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:
>
> For additional commands, e-mail:
>
