xacml — archive

Re: [xacml] change request: namespaces in xpath expressions

From: Michiharu Kudo <[email protected]>
To: [email protected]
Date: Sat, 28 Sep 2002 11:20:00 -0000

 MHonArc v2.5.2 -->
















xacml message






[Date Prev]
 | [Thread Prev]
 | [Thread Next]
 | [Date Next]

--

[Date Index]
 | [Thread Index]
 | [Elist Home]








Subject: Re: [xacml] change request: namespaces in xpath expressions




From: Michiharu Kudoh <[email protected]>
To: [email protected]
Date: Sun, 29 Sep 2002 00:19:16 +0900







Simon,
Do you know any spec which use xmlns attribute not for complementing the
element name? If yes, I want to see that. If not, I would prefer to have
explicit XPathNamespace element. In the namespace specification, it defines
that namespaces are applied to the element. They are meant to be used by a
validating XML parser. My preference is that we don't add any xmlns
attribute that is irrespective of a validation semantics. If you are
concerned with the semantics of the scope of the XPathNamespace that is
identical to one defined for the xmlns, I am ok to simplify it by removing
XPathNamespace element from AttributeSelector. And PolicyDefaults in Policy
element defines XPathNamespace of Policy and Rule. PolicyDefaults in
PolicySet element defines XPathNamespace of PolicySet. This is much
simpler. It is clearer because policy writer explicitly defines the
namespace expected in the request context.

Michiharu Kudo

IBM Tokyo Research Laboratory, Internet Technology
Tel. +81 (46) 215-4642   Fax +81 (46) 273-7428




                                                                                                                                                    
                      Simon Godik                                                                                                                   
                      <[email protected]>        To:       [email protected]                                                                 
                                               cc:                                                                                                  
                      2002/09/28 03:42         Subject:  Re: [xacml] change request: namespaces in xpath expressions                                
                                                                                                                                                    
                                                                                                                                                    
                                                                                                                                                    



Michiharu,
You are correct, xmlns decl is used for elements and we have data.
Our first problem is that we do not cover all cases with XPathNamespace
element. Also, declaring XPathNamespace in the PolicyDefaults is
equivalent in my opinion to declare namespace prefix on the Policy itself.
So I'd like to use xmlns decl, although it's usage is applied to data.
Simon