attribute filter rule : permit ANY by default ?

[David Bantz]

+1

but sorry, no Scotch

David Bantz


On Tue, 6 Aug 2013, at 13:07 , Tom Zeller <tzeller at dragonacea.biz> wrote:

> Looking at the couple of attribute-filter.xml files that folks sent
> me, it looks like the most common stanza is :
> 
> <AttributeRule attributeID="foo">
>   <PermitValueRule xsi:type="basic:ANY" />
> </AttributeRule>
> 
> which makes me think that a default permit any value rule would
> shorten configurations, so instead :
> 
> <AttributeRule attributeID="foo" />
> 
> I do understand that someone might smack me for suggesting a default
> permit any rule. Smack away...
> --
> To unsubscribe from this list send an email to dev-unsubscribe at shibboleth.net

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 163 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://shibboleth.net/pipermail/dev/attachments/20130806/37af7ce9/attachment.bin