Functions in XACML 2.0

["diego gonzalez" <diegog@lagash.com>]

Hi, 

 

I'm reading the spec and I found that some functions are missing. In the
section "A.2. Data-types" the following (new) data types are defined:

*	urn:oasis:names:tc:xacml:2.0:data-type:ipAddress
*	urn:oasis:names:tc:xacml:2.0:data-type:dnsName

 

Later, the section "A.3.10 Bag functions" defines the following
functions:

*	urn:oasis:names:tc:xacml:1.0:function:type-one-and-only
*	urn:oasis:names:tc:xacml:1.0:function:type-bag-size
*	urn:oasis:names:tc:xacml:1.0:function:type-is-in
*	urn:oasis:names:tc:xacml:1.0:function:type-bag

 

And later the section "A.3.11 Set functions", defines the following
functions:

*	urn:oasis:names:tc:xacml:1.0:function:type-intersection
*
urn:oasis:names:tc:xacml:1.0:function:type-at-least-one-member-of
*	urn:oasis:names:tc:xacml:1.0:function:type-union
*	urn:oasis:names:tc:xacml:1.0:function:type-subset
*	urn:oasis:names:tc:xacml:1.0:function:type-set-equals

 

In the description of the functions there are also references to a
function named "urn:oasis:names:tc:xacml:x.x:function:type-equal", but
in the "A.3.1 Equality predicates" there are no functions defined for
the new types, and the equality operator is not defined for those types.

 

My questions are: There will be Bag and Set functions for the new data
types? What will be the name for those functions? 

 

Thanks,

Diego Gonzalez

Lagash Systems SA