[jboss-user] [Security & JAAS/JBoss] - JBossXACML: Bug in HigherOrderFunction Class of sun's XACML

karink do-not-reply at jboss.com
Mon Mar 23 10:52:15 EDT 2009


Hi,

there seem's to be a bug in the Class HigherOrderFunction of Sun's XACML implementation

  public void checkInputs(List inputs) throws IllegalArgumentException {
  | ...
  | 
  |         // make sure the two args are of the same type
  |         if (! eval1.getType().equals(eval2.getType()))
  |             throw new IllegalArgumentException("input types to the any/all " +
  |                                                "functions must match");
  | 
  |      ...
  |     }

The code will not work with function 
urn:oasis:names:tc:xacml:2.0:function:anyURI-regexp-match (where the spec defines that the two arguments must not be from the same type) -> see also p. 124 of document http://docs.oasis-open.org/xacml/2.0/access_control-xacml-2.0-core-spec-os.pdf

Do you know if there exists a bug fix from sun?

Regards Karin

View the original post : http://www.jboss.org/index.html?module=bb&op=viewtopic&p=4220276#4220276

Reply to the post : http://www.jboss.org/index.html?module=bb&op=posting&mode=reply&p=4220276



More information about the jboss-user mailing list