Re: JSON Profile WD-14 Issues

From
David Brossard <>
Date
2013-08-19T07:37:57+00:00
ID
CABSq=
Thread
Re: JSON Profile WD-14 Issues
Hi Steven,

See my comments inline:

On Mon, Aug 19, 2013 at 9:03 AM, Steven Legg <> wrote:

Hi David,

I noticed some problems in working draft 14 of the JSON profile.

Section 5.2.2 mentions "Attributes" as one of the objects in a Result

object (which you have now called Category") and section 5.2.9 uses

"object" to refer to both the XML element and its corresponding JSON

representation. You should refer to the <Attributes> *element* and

the Category *object*.

I changed the phrasing to:

 
Attributes: this object is
     optional. It can be single-valued or an array of Category objects.

Category is now a link to the relevant section in the profile document.

 

 

Section 5.2.4 says "the StatusCode object may contain a sequence of

StatusCode objects". The XACML core says something similar, but the

associated XML Schema allows at most one child StatusCode element.

I've added an item on this to the wiki errata page. Assuming the XML

Schema is correct, a StatusCode object contains an optional

StatusCode object.

Regarding this, I followed the PDF rather than the XSD. In the PDF, it is stated that:

The <StatusCode> element contains a major status code value and an optional sequence of minor  status codes.

<xs:element name="StatusCode" type="xacml:StatusCodeType"/>  

<xs:complexType name="StatusCodeType">

  <xs:sequence>

  <xs:element ref="xacml:StatusCode" minOccurs="0"/>

  </xs:sequence>

  <xs:attribute name="Value" type="xs:anyURI" use="required"/>

  </xs:complexType> 

The <StatusCode> element is of StatusCodeType complex type. 

The <StatusCode> element contains the following attributes and elements: 

Value [Required] 

See Section B.8 for a list of values. 

<StatusCode> [Any Number] 

Minor status code. This status code qualifies its parent status code.

In that respect, the JSON profile is in line with the XACML 3.0 PDF standard and I would rather keep it that way.

Section 5.2.6 refers to the Advice object, but it should be referring

to the ObligationOrAdvice object.

Yes, you are right. One of my developers actually emailed me that very point a week back. It's now fixed.

Regards,

Steven

Thanks for spotting those. They are minor however and I don't want to disrupt the current process (unless the profile doesn't pass public review of course).

What do you think?

-- 
David Brossard, M.Eng, SCEA, CSTP
Product Manager
+46(0)760 25 85 75
Axiomatics AB

Skeppsbron 40
S-111 30 Stockholm, Sweden
http://www.linkedin.com/companies/536082
http://www.axiomatics.com

http://twitter.com/axiomatics