xacml — archive

Summary of the discussion on WI#10: Parameter for algorithm

From: Michiharu Kudo <[email protected]>
To: [email protected]
Date: Thu, 25 Mar 2004 04:34:00 -0000

 MHonArc v2.5.0b2 -->
















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: Summary of the discussion on WI#10: Parameter for algorithm




From: Michiharu Kudoh <[email protected]>
To: "'[email protected]'" <[email protected]>
Date: Thu, 25 Mar 2004 13:48:34 +0900










I am supposed to post the summary of the discussion among Simon, Polar and
me. Let me clarify
the discussion we had so far.

1. Simon suggested the following extension to support combiner parameters:
                                                                            
 <xs:element name="CombinerParameters"                                      
 type="xacml:CombinerParametersType"/>                                      
 <xs:complexType name="CombinerParametersType">                             
 <xs:sequence>                                                              
 <xs:element ref="xacml:CombinerParameter" minOccurs="0"                    
 maxOccurs="unbounded"/>                                                    
 </xs:sequence>                                                             
 </xs:complexType>                                                          
 <!-- -->                                                                   
 <xs:element name="CombinerParameter" type="xacml:CombinerParameterType"/>  
 <xs:complexType name="CombinerParameterType">                              
 <xs:sequence>                                                              
 <xs:any namespace="##any" processContents="lax" minOccurs="0"              
 maxOccurs="unbounded"/>                                                    
 </xs:sequence>                                                             
 <xs:attribute name="ParameterName" type="string" use="required"/>          
 </xs:complexType>                                                          
                                                                            



2. Example policies are:

<Policy algid="priority-rule-combo-algo">
  <CombinerParameters>
    <CombinerParameter ParameterName="priority">10
    </CombinerParameter>
    <CombinerParameter ParameterName="priority">5
    </CombinerParameter>
  </CombinerParameters>
  <Rule effect="permit">... rule 1...</Rule>
  <Rule effect="permit">... rule 2 ...</Rule>
</Policy>

and

<Policy algid="priority-rule-combo-algo">
  <CombinerParameters>
    <CombinerParameter ParameterName="priority">10
    </CombinerParameter>
  </CombinerParameters>
  <Rule effect="permit">... rule 1...</Rule>
  <CombinerParameters>
    <CombinerParameter ParameterName="priority">5
    </CombinerParameter>
  </CombinerParameters>
  <Rule effect="permit">... rule 2 ...</Rule>
</Policy>

3. Some concerns (raised by Polar)

Q1 How flexible should we allow for the combiner parameter? No limitation?
Q2 Should we provide a way to use XACML useful syntax (reference,
expressions etc.) for specifying combininng parameters?

There are two ways to address the above issues:
- No further syntactical limitation for combiner parameter
- Enforce more restriction on syntax for combiner parameter
(XACML-compliant syntax e.g. attribute value etc.)

Best,
Michiharu







Follow-Ups:

Re: [xacml] Summary of the discussion on WI#10: Parameter foralgorithm
From: Polar Humenn <[email protected]>








[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]