[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]
Subject: wd-20 issues (mostly typos)
7.19.3 Missing attributes
"If, in this case, and a status code is supplied, then the value"
- Remove "and".
A.2 Data-types
"XPath expression
The "urn:oasis:names:tc:xacml:3.0:data-type:xpathExpression" primitive type represents an XPath expression selects over the XML in a <Content> element."
- Remove "selects"?
A.3.10 Bag functions
"urn:oasis:names:tc:xacml:x.x:function:type-one-and-only
This function SHALL take a bag of 'type' values as an argument and SHALL return a value of '-type'."
- "'-type'" should be "'type'".
"urn:oasis:names:tc:xacml:x.x:function:type-is-in
This function SHALL take an argument of 'type' as the first argument and a bag of type values"
- Second "type" should be "'type'".
A.3.12 Higher-order bag functions
"urn:oasis:names:tc:xacml:1.0:function:all-of
This function applies a Boolean function between a specific primitive values"
- "values" should be "value"
"urn:oasis:names:tc:xacml:1.0:function:all-of-any
This function applies a Boolean function between the elements of two bags. The expression SHALL be "True" if and only if the supplied predicate is 'True'"
- Last "True" should be wrapped in double quotes, not single.
"urn:oasis:names:tc:xacml:1.0:function:any-of-all
The expression SHALL be evaluated as if the "rn:oasis:names:tc:xacml:1.0:function:any-of""
- URI should start with "urn:", not "rn:"
B.4 Subject attributes
"urn:oasis:names:tc:xacml:1.0:subject:authn-locality:ip-address
The corresponding attribute SHALL be of data-type "http://www.w3.org/2001/XMLSchema#string".
urn:oasis:names:tc:xacml:1.0:subject:authn-locality:dns-name
The corresponding attribute SHALL be of data-type "http://www.w3.org/2001/XMLSchema#string"."
- Why aren't these of types urn:oasis:names:tc:xacml:2.0:data-type:ipAddress and urn:oasis:names:tc:xacml:2.0:data-type:dnsName?
C.1 Extended Indeterminate values
"The output of a combining algorithm which does not track the extended set of "Indeterminate" values MUST be treated as "Indeterminate{DP}""
- Only if the output is Indeterminate.
C.4 Permit-overrides
"5. Otherwise, if decision is "Deny", the result is "Deny"."
- "if decision" should be "if any decision".
C.6 Deny-unless-permit
"The decisions may be processed in any order, so the set of obligations provided by this algorithm is not deterministic."
- And advice.
C.10 Legacy Deny-overrides
"for( i=0 ; i < lengthOf(ruless) ; i++ )"
- "ruless" should be "rules"
Thanks,
Ray
[Date Prev] | [Thread Prev] | [Thread Next] | [Date Next] -- [Date Index] | [Thread Index] | [List Home]