John Merrells,
This was a deliberate "error" intended to produce a result of
"Indeterminate" for that Rule. Test Case IID002 tests that a
result of "Deny" is returned in accordance with the
deny-overrides algorithm even if one of the rules returns
Indeterminate.
Please let me know if I am overlooking something.
Anne Anderson
On 26 November, John Merrells writes: [xacml-comment] D002
> From: John Merrells <>
> To: "''" <>
> Subject: [xacml-comment] D002
> Date: Tue, 26 Nov 2002 17:35:05 -0800
>
>
> The policy uses string-equal as if the args were (bag<string>,string),
> this should
> probably be using the any-of method...
>
> <Condition
> FunctionId="urn:oasis:names:tc:xacml:1.0:function:string-equal">
> <SubjectAttributeDesignator
>
> AttributeId="urn:oasis:names:tc:xacml:1.0:conformance-tests:bogus"
> DataType="http://www.w3.org/2001/XMLSchema#string"/>
> <AttributeValue
>
> DataType="http://www.w3.org/2001/XMLSchema#string">Zaphod
> Beeblebrox</AttributeValue>
>
> I bet this snippet was cut from a Target and pasted into a Condition.
> This is
> exactly the problem I was talking about yesterday...
>
> John
>
>
> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>
>
--
Anne H. Anderson Email:
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311 Tel: 781/442-0928
Burlington, MA 01803-0902 USA Fax: 781/442-1692
