← Prev in month ← Prev in thread

Issue for Errata: XPathCategory attribute not in schema or spec + other related issues

From
rich levinson <>
Date
2013-04-30T23:41:32+00:00
ID
Thread
Issue for Errata: XPathCategory attribute not in schema or spec + other related issues
The XPathCategory attribute, described in:

    
      
 section 5.30, line 2489,

      
 Appendix A.2, line 4052

    
    
which also shows up in examples:

    

    
      
4.2.2 Example RequestContext, line 967,

      
4.2.4.1 Rule 1, line 1089,

      
4.2.4.2 Rule 2, line 1253,

      
4.2.4.3 Rule 3, line 1418,

      
4.2.4.4 Rule 4, line 1588

    
    
does not appear in any of the schema descriptions in the spec,
      nor in

      the xsd, itself.

    

    
Based on the text of Appendix A.2 XPathExpression, lines 4050-4053:

    

    "... When the value is encoded in an
      <AttributeValue> element,

       the namespace context is given by the <AttributeValue>
      element

       and an XML attribute called XPathCategory gives the category

       of the <Content> element where the _expression_ applies. ..."

    
    and the fact that the XPathCategory shows up in AttributeValue

    elements in the examples, it would seem that AttributeValue might

    need to have the XPathCategory xml attribute defined for it as

    an optional attribute.

    

    One other related issue has to do with the description of the
    ContextSelectorId

    attribute that refers to XPathCategory (lines 2485-2490):

    "ContextSelectorId [Optional]

      This attribute refers to the attribute (by its AttributeId) in the
      request context

       in the category given by the Category attribute.

      The referenced attribute MUST have data type

         urn:oasis:names:tc:xacml:3.0:data-type:xpathExpression,

       and must select a single node in the <Content> element.

      The XPathCategory attribute of the referenced attribute MUST be
      equal to

       the Category attribute of the attribute selector."

    
    
The last sentence of the above description sounds like
      XPathCategory

      is an attribute of the <Attribute> element, as opposed to
      the <AttributeValue>

      element.

    

    
A second related issue also has to do with the above
      ContextSelectorId text, except

      that the issue is implicit by the examples, where in the example
      rules, the construct

      used is an AttributeDesignator in a <Match> element, as
      opposed to an AttributeSelector.

    

    
Despite the fact that the AttributeDesignator construct is not
      defined in the spec

      for XPathExpression, its use in the examples appears logical and I
      would suggest

      adding an explanation that when an AttributeDesignator contains an

      XPathExpression DataType, that the associated AttributeValue in
      the Match

      element can have an XPathCategory specifying which Attributes
      element the

      Content is that the value should be selected from.

    

    
    Thanks,

          Rich
← Prev in month ← Prev in thread