OASIS Mailing List ArchivesView the OASIS mailing list archive below
or browse/search using MarkMail.

 


Help: OASIS Mailing Lists Help | MarkMail Help

 


 

   Re: [xml-dev] XACML adding new functions

[ Lists Home | Date Index | Thread Index ]

Natalie,

I don't believe that the XACML 1.0 spec is clear on this issue; so you
may simply use your own URN. I would recommend, however, that you
clarify this with the XACML TC on their comments listserv [1].

In terms of URN format/contents, the XACML spec uses an "example" URN
quite frequently - for example:

urn:oasis:names:tc:xacml:1.0:example:SimpleRule1
urn:oasis:names:tc:xacml:example:obligation:email

So you may want to follow this same "convention" and use a URN of the
format:

urn:oasis:names:tc:xacml:1.0:example:function:your-function-name

There are several references in the XACML 1.0 spec that mention this
issue, but they do not address extension URNs - they are:

(1) Lines 3550-3555:

"In addition, functions that are strictly within an extension to XACML
MAY appear as a value for the MatchId attribute, and those functions MAY
use data-types that are also extensions, so long as the extension
function returns a boolean result and takes an attribute value as its
first argument and an <AttributeDesignator> or <AttributeSelector> as
its second argument. The function used as the value for the MatchId
attribute SHOULD be easily indexable. Use of non-indexable or complex
functions may prevent efficient evaluation of decision requests."

(2) Lines 4397-4399:

"Functions and primitive types are specified by string identifiers
allowing for the introduction of functions in addition to those
specified by XACML. This approach allows one to extend the XACML
module with special functions and special primitive data-types."

Hope that helps.

Kind Regards,
Joe Chiusano
Booz | Allen | Hamilton

[1] mailto:xacml-comment@lists.oasis-open.org

Natalie.Krainski@infineon.com wrote:
> 
> Hi,
> 
> I don't know if this is the right place to go with my problem, but I think
> it's worth trying.
> I wanted to add a new function (such as string-equal) to my xml (xacml) -
> file. I've written the function in Java, as told at sourceforge.net. I think
> it works, but now I don't know how to integrate this function in my
> xml-file. What URI do I have to use?
> 
> I hope someone can help me?!
> thx, Natalie
> 
> -----------------------------------------------------------------
> The xml-dev list is sponsored by XML.org <http://www.xml.org>, an
> initiative of OASIS <http://www.oasis-open.org>
> 
> The list archives are at http://lists.xml.org/archives/xml-dev/
> 
> To subscribe or unsubscribe from this list use the subscription
> manager: <http://lists.xml.org/ob/adm.pl>
begin:vcard 
n:Chiusano;Joseph
tel;work:(703) 902-6923
x-mozilla-html:FALSE
url:www.bah.com
org:Booz | Allen | Hamilton;IT Digital Strategies Team
adr:;;8283 Greensboro Drive;McLean;VA;22012;
version:2.1
email;internet:chiusano_joseph@bah.com
title:Senior Consultant
fn:Joseph M. Chiusano
end:vcard




 

News | XML in Industry | Calendar | XML Registry
Marketplace | Resources | MyXML.org | Sponsors | Privacy Statement

Copyright 2001 XML.org. This site is hosted by OASIS