xacml — archive

RE: [xacml] Groups - oasis-xacml-profile-dsig-wd-03.pdf uploaded

From: Tim Moses <[email protected]>
To: [email protected]
Date: Tue, 24 Aug 2004 19:10:00 -0000

 MHonArc v2.5.0b2 -->
















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [List Home]








Subject: RE: [xacml] Groups - oasis-xacml-profile-dsig-wd-03.pdf uploaded




From: Tim Moses <[email protected]>
To: "'[email protected]'" <[email protected]>,       "'[email protected]'" <[email protected]>
Date: Tue, 24 Aug 2004 15:10:01 -0400






XACML Profile for SAML 2.0, WD 04, 19 Aug 2004

Line numbers from the PDF version

Section 4.1 - Please consider adding <xacml:Target> to the choice.  Here is
the justification.  A valid use model is for a PDP to retrieve the necessary
policies at deployment time, rather than upon receiving a request.  The PDP
is configured with a "topic", whose syntax is an <xacml:Target>.  The
associated semantics are: the set of requests that the PDP is intended to
answer.  The topic is used to retrieve and load all the policies that may
apply to any such request.

Trivial ...

Line 62 - Change "[XACML-SAMLP]" to "[XACML]".

Line 86 - Change "Markup Assertion" to "Assertion Markup".

Line 123 - Some of these definitions end with ">", others do not.

Line 147 - Change "must" to "MUST".

Line 151 - Change "when capitalized" to "when the initial letter is
capitalized".

Line 159 - Change "is name/value" to "is a name/value".

Lines 196 & 198 - Change "The value" to "The fully-qualified value".  Or,
maybe, there is a better wording.  The issue is that the literal value of
the Name XML attribute may depend on a namespace declaration somewhere else
in the assertion.

Line 252 - Delete leading space.

Lines 270 & 277 - Would it make sense to specify a default value?

Line 290 - Change "element" to "XML attribute".

Line 325 - Change "an" to "a".

Line 332 - Change "[XACML-SAMLP]" to "[XACML]".

Line 356 - Change "is" to "SHALL be".  Change "may" to "MAY".

Line 406 - Delete "in the".

Line 420 - Change <samlp:Request> to <samlp:Response>.

Lines 437, 440, 447 & 454 - Change "VALUE" to "value".