#153 13.6 Abstract Access Control Model

[Richard Lessard]

>In the ebRIM-2.5, section 13.6 "Abstract Access
Control Model" states:
>
>"The objectType attribute of this ExtrinsicObject must
reference the AccessControlPolicy node in the canonical
ObjectType ClassificationScheme or one of its
descendents. This distinguishes Access Control Policy
objects from other ExtrinsicObject instances."
>
>In the ebxmlrr "ObjectType" ClassificationScheme,
there is no ClassifiactionNode titled
"AccessControlPolicy". What is present is the following:
>ObjectType
> ->RegistryObject
> ->RegistryEntry
> ->ExtrinsicObject
> ->XACML
> ->PolicySet
> ->Policy
>
>What ObjectType(s) currently validate an ACP?
>
>Wouldn't the ObjectType ClassificationScheme better
represent the ebRIM-2.5 if it were designed like this?
>ObjectType
> ->RegistryObject
> ->RegistryEntry
> ->ExtrinsicObject
> ->AccessControlPolicy
> ->XACML
> ->PolicySet
> ->Policy
>
Thanks for catching this mistake in 2.5 spec. Instead
it should read:

"The objectType attribute of this ExtrinsicObject must
reference the Policy or PolicySet node in the canonical
ObjectType ClassificationScheme. This distinguishes
Access Control Policy objects from other
ExtrinsicObject instances."

Please file a spec bug in the ebxmlrr project under
category
ebxmlrr-spec with a copy of this text.
We will fix it in next version (3.0) of the ebXML
Registry specs.

Thanks Richard.