RE: Assertion Element

[George Robert Blakley III <blakley@us.tivoli.com>]

OK... In Phill's diagram both Conditions and Attributes are not further
elaborated which is probably why
I got mixed up.  I'll go look at the other diagrams Phill sent out and see
if they're in there.

Sounds like we're good.


--bob

Bob Blakley (email: blakley@us.tivoli.com   phone: +1 512 436 1564)
Chief Scientist, Security and Privacy, Tivoli Systems, Inc.


Hal Lockhart <hal.lockhart@entegrity.com> on 08/24/2001 01:19:10 PM

Please respond to Hal Lockhart <hal.lockhart@entegrity.com>

To:   George Robert Blakley III/Austin/IBM@IBMUS, Hal Lockhart
      <hal.lockhart@entegrity.com>
cc:   "'security-services@lists.oasis-open.org'"
      <security-services@lists.oasis-open.org>
Subject:  RE: Assertion Element



I haven't looked at the diagrams yet, but:

1. NotBefore/NotAfter are defined under Conditions, which is in
AssertionAbstractType

2. Attribute has a complex strucure with potentially independant name and
value namespaces and multi-valued attributes, all described in section 1.6

Hal

> -----Original Message-----
> From: George Robert Blakley III [mailto:blakley@us.tivoli.com]
> Sent: Friday, August 24, 2001 2:12 PM
> To: Hal Lockhart
> Cc: 'security-services@lists.oasis-open.org'
> Subject: Assertion Element
>
>
> I was looking at Phill's diagrams yesterday evening and two
> things jumped
> out at me.
>
> The first was that I couldn't find the validity interval
> (NotBefore/NotAfter) anywhere.  I thought these
> were in the base schema... but I can't remember for sure.
> The second was
> that the AttributeAssertionType
> has a simple "Attribute" member... should this be called out as a
> Type/Value or Name/Value structure?
>
>
> --bob
>
> Bob Blakley (email: blakley@us.tivoli.com   phone: +1 512 436 1564)
> Chief Scientist, Security and Privacy, Tivoli Systems, Inc.
>
>
> Hal Lockhart <hal.lockhart@entegrity.com> on 08/24/2001 12:44:43 PM
>
> Please respond to Hal Lockhart <hal.lockhart@entegrity.com>
>
> To:   "'security-services@lists.oasis-open.org'"
>       <security-services@lists.oasis-open.org>
> cc:
> Subject:  Object Element
>
>
>
> Someone else may have already spotted this, but more cleanup
> is required
> around Object in core 0.15.
>
> QueryAbstractType still refers to Object, but in
> Authorization Decision
> Assertion, Object has been eliminated and Resource and Action are now
> independant elements.
>
> Hal
>
> ----------------------------------------------------------------
> To subscribe or unsubscribe from this elist use the subscription
> manager: <http://lists.oasis-open.org/ob/adm.pl>
>