attribute filter rule : permit ANY by default ?

[David Langenberg]

How about instead of smacking you I send you a bottle of scotch?  99% of
the time I don't filter values out of attributes, having a short-cut
default allow rule would really make life more pleasant.

Dave


On Tue, Aug 6, 2013 at 3:07 PM, Tom Zeller <tzeller at dragonacea.biz> wrote:

> Looking at the couple of attribute-filter.xml files that folks sent
> me, it looks like the most common stanza is :
>
> <AttributeRule attributeID="foo">
>    <PermitValueRule xsi:type="basic:ANY" />
> </AttributeRule>
>
> which makes me think that a default permit any value rule would
> shorten configurations, so instead :
>
>  <AttributeRule attributeID="foo" />
>
> I do understand that someone might smack me for suggesting a default
> permit any rule. Smack away...
> --
> To unsubscribe from this list send an email to
> dev-unsubscribe at shibboleth.net
>



-- 
David Langenberg
Identity & Access Management
The University of Chicago
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/dev/attachments/20130806/7a1a2417/attachment.html