Re: [xacml] Groups - XACML MAP Authorization Profile WD3 uploaded

Hi Richard,

Here's a couple of things I noticed on a quick scan.

The bullet point on line 302 says:

    "Unless the IF-MAP metadata item has a top-level attribute named ATTR,
     the value of the XACML attribute MUST NOT be present."

It sounds a bit like the attribute can appear without a value, which the
XML Schema doesn't allow. I'm guessing you meant this:

    Unless the IF-MAP metadata item has a top-level attribute named ATTR,
    the XACML attribute corresponding to ATTR MUST NOT be present.

Or equivalently:

    If the IF-MAP metadata item does not have a top-level attribute named ATTR,
    then the XACML attribute corresponding to ATTR MUST NOT be present.


The AttributeId on line 387 doesn't follow the format for an identifier
attribute. It seems to me like it should be
urn:oasis:names:tc:xacml:3.0:if-map:content:resource:identifier-attribute:identity:type .

Regards,
Steven

On 31/10/2013 9:19 AM, Richard Hill wrote: