[XML-DEV Mailing List Archive Home] [By Thread] [By Date] [Recent Entries] [Reply To This Message]

Re: XACML adding new functions

• To: Natalie.Krainski@i...
• Subject: Re: XACML adding new functions
• From: "Chiusano Joseph" <chiusano_joseph@b...>
• Date: Thu, 14 Aug 2003 09:11:04 -0400
• Cc: xml-dev@l...
• Organization: Booz Allen Hamilton
• References: <2FE102C39AC9D311B24B00A0C9F0099602DC2336@v...>

Natalie,

I don't believe that the XACML 1.0 spec is clear on this issue; so you
may simply use your own URN. I would recommend, however, that you
clarify this with the XACML TC on their comments listserv [1].

In terms of URN format/contents, the XACML spec uses an "example" URN
quite frequently - for example:

urn:oasis:names:tc:xacml:1.0:example:SimpleRule1
urn:oasis:names:tc:xacml:example:obligation:email

So you may want to follow this same "convention" and use a URN of the
format:

urn:oasis:names:tc:xacml:1.0:example:function:your-function-name

There are several references in the XACML 1.0 spec that mention this
issue, but they do not address extension URNs - they are:

(1) Lines 3550-3555:

"In addition, functions that are strictly within an extension to XACML
MAY appear as a value for the MatchId attribute, and those functions MAY
use data-types that are also extensions, so long as the extension
function returns a boolean result and takes an attribute value as its
first argument and an <AttributeDesignator> or <AttributeSelector> as
its second argument. The function used as the value for the MatchId
attribute SHOULD be easily indexable. Use of non-indexable or complex
functions may prevent efficient evaluation of decision requests."

(2) Lines 4397-4399:

"Functions and primitive types are specified by string identifiers
allowing for the introduction of functions in addition to those
specified by XACML. This approach allows one to extend the XACML
module with special functions and special primitive data-types."

Hope that helps.

Kind Regards,
Joe Chiusano
Booz | Allen | Hamilton

[1] mailto:xacml-comment@l...

Natalie.Krainski@i... wrote:
> 
> Hi,
> 
> I don't know if this is the right place to go with my problem, but I think
> it's worth trying.
> I wanted to add a new function (such as string-equal) to my xml (xacml) -
> file. I've written the function in Java, as told at sourceforge.net. I think
> it works, but now I don't know how to integrate this function in my
> xml-file. What URI do I have to use?
> 
> I hope someone can help me?!
> thx, Natalie
> 
> -----------------------------------------------------------------
> The xml-dev list is sponsored by XML.org <http://www.xml.org>, an
> initiative of OASIS <http://www.oasis-open.org>
> 
> The list archives are at http://lists.xml.org/archives/xml-dev/
> 
> To subscribe or unsubscribe from this list use the subscription
> manager: <http://lists.xml.org/ob/adm.pl>

begin:vcard 
n:Chiusano;Joseph
tel;work:(703) 902-6923
x-mozilla-html:FALSE
url:www.bah.com
org:Booz | Allen | Hamilton;IT Digital Strategies Team
adr:;;8283 Greensboro Drive;McLean;VA;22012;
version:2.1
email;internet:chiusano_joseph@b...
title:Senior Consultant
fn:Joseph M. Chiusano
end:vcard

• References:
  • XACML adding new functions
    • From: Natalie.Krainski@i...

• Prev by Date: RE: Re: Silly indemnity FUD
• Next by Date: RE: Symbol Grounding and Running Code: Is XML Really E xtensible?
• Previous by thread: XACML adding new functions
• Next by thread: Re: XACML adding new functions
• Index(es):
  • Date
  • Thread