JBossXacml

[karink]

Hi
I would like to work with an XACML request containing more than one resource-id (all the resource-ids identify to the same resource)

In this case JBossPDP cannot evaluate my request

message: Resource may contain only one resource-id Attribute

According to the spec I think it is allowed to have one til many resource id(s)

see http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-core-spec-os.pdf
p. 70

The Resource element MAY contain one or more <Attribute> elements with an
AttributeId of urn:oasis:names:tc:xacml:2.0:resource:resource-id.

Regards Karin

[anil.saldhana]

https://jira.jboss.org/jira/browse/SECURITY-403

You able to provide a sample of the request you are using? If you have, you can attach it to the JIRA issue.

If not, I will cook up one. If you provide the request sample, you can be sure the fix will be definite. :)

Will be part of CR5 (Tue)

[karink]

Hi Anil
I attached a request sample to the Jira Bug
Regards
Karin

[anil.saldhana]

Karin, thanks for the sample request. I have the fix - want to verify your sample request. CR5 is tomorrow.

2.0.3 will be around middle of April.

[anil.saldhana]

Uploading: https://snapshots.jboss.org/maven2/org/jboss/security/jbossxacml/2.0.3.CR4-SNAPSHOT/jbossxacml-2.0.3.CR4-20090330.131322-1.jar

If in a hurry, pick the snapshot.

[anil.saldhana]

http://anil-identity.blogspot.com/2009/03/jbossxacml-203cr5-released.html

[karink]

Hi Anil,
thanks for this quick fix, I'll test it
Regards
Karin