AW: AW: AW: [Geopriv] common policy document

hi henning, 

the <any-identity> element is a condition element that matches any
authenticated and asserted identity.

as an example, the following two rules (that are shown in ruleset (1))
are equivalent to rule, which uses the <any-identity> element, shown in
ruleset (2) :

1) WITHOUT <any-identity>:

<?xml version="1.0" encoding="UTF-8"?>
<ruleset xmlns="urn:ietf:params:xml:ns:common-policy">

  <rule id="f3g44r2">
    <conditions>
      <identity/>
    </conditions>
  </rule>

  <rule id="f3g44r2">
    <conditions>
      <asserted/>
    </conditions>
  </rule>
</ruleset>

1) WITH <any-identity>:

<?xml version="1.0" encoding="UTF-8"?>
<ruleset xmlns="urn:ietf:params:xml:ns:common-policy">

  <rule id="f3g44r2">
    <conditions>
      <any-identity/>
    </conditions>
  </rule>
</ruleset>

with more complex rules (e.g., <any-identity/> with multiple
<except-domain> elements) it would be necessary to replicate them. 

does this make more sense? 

ciao
hannes

> To help the discussion along, can you summarize the two 
> options or given 
> an example?
> 
> 
> Tschofenig, Hannes wrote:
> > hi jari, 
> > 
> > thanks for your comment. please find a short response below: 
> > 
> > ~snip~snip~
> > 
> > 
> >>I'll have another question about common-pol-05. I don't understand
> >><domain>s in <any-identity>. It seems to me that they break the
> >>consistent model of "anything", why can't you get similar thing with
> >><domain>s in <identity> ?
> > 
> > 
> > this is a very good question. the <any-identity> was proposed as a
> > condition element that matches any authenticated and 
> asserted identity.
> > the <any-identity> is basically a short version of 
> <identity/> combined
> > with <asserted/>. the <any-identity> with the domain 
> element can also be
> > replaced by the respective combination of <identity> and <asserted>.
> > 
> > hence, your comment raises the question whether we can 
> actually omit the
> > <any-identity> element. at the interim meeting there was no comment
> > regarding this issue. what do you think?
> > 
> > ciao
> > hannes
> > 
> >>br,
> >>Jari
> >>
> >>
> > 
> > 
> > _______________________________________________
> > Geopriv mailing list
> > Geopriv@ietf.org
> > https://www1.ietf.org/mailman/listinfo/geopriv
> 
> 
> _______________________________________________
> Geopriv mailing list
> Geopriv@ietf.org
> https://www1.ietf.org/mailman/listinfo/geopriv
> 

_______________________________________________
Geopriv mailing list
Geopriv@ietf.org
https://www1.ietf.org/mailman/listinfo/geopriv