xacml — archive

RE: [xacml] condition reference text (item 7)

From: Tim Moses <[email protected]>
To: [email protected]
Date: Tue, 16 Mar 2004 19:31:00 -0000

 MHonArc v2.5.0b2 -->
















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: RE: [xacml] condition reference text (item 7)




From: Tim Moses <[email protected]>
To: "'Simon Godik'" <[email protected]>,       "'[email protected]'" <[email protected]>
Date: Tue, 16 Mar 2004 14:45:46 -0500






Simon - Here is your definition of PolicyType ...

<xs:complexType name="PolicyType">
 <xs:sequence>
  <xs:element ref="xacml:Description" minOccurs="0"/>
  <xs:element ref="xacml:PolicyDefaults" minOccurs="0"/>
  <xs:element ref="xacml:Target"/>
  <xs:choice minOccurs="0" maxOccurs="unbounded">
   <xs:element ref="xacml:VariableDefinition"/>
   <xs:element ref="xacml:Rule"/>
  </xs:choice>
  <xs:element ref="xacml:Obligations" minOccurs="0"/>
 </xs:sequence>
 <xs:attribute name="PolicyId" type="xs:anyURI" use="required"/>
 <xs:attribute name="RuleCombiningAlgId" type="xs:anyURI" use="required"/>
</xs:complexType>

I had been assuming it would be more like this ...

<xs:complexType name="PolicyType">
 <xs:sequence>
  <xs:element ref="xacml:Description" minOccurs="0"/>
  <xs:element ref="xacml:PolicyDefaults" minOccurs="0"/>
  <xs:element ref="xacml:Target"/>
  <xs:element ref="xacml:VariableDefinition" minOccurs="0"
maxOccurs="unbounded"/>
  <xs:element ref="xacml:Rule" minOccurs="0" maxOccurs="unbounded"/>
  <xs:element ref="xacml:Obligations" minOccurs="0"/>
 </xs:sequence>
 <xs:attribute name="PolicyId" type="xs:anyURI" use="required"/>
 <xs:attribute name="RuleCombiningAlgId" type="xs:anyURI" use="required"/>
</xs:complexType>

The only significance (I think) is that your definition allows
VariableDefinition elements to be intermixed with Rule elements, whereas the
alternative causes all VariableDefinition elements to occur "up front".
i.e. there can be no forward references.

What do you think?  Is the alternative preferable?  All the best.  Tim.