Attribute Filter predicates

Cantor, Scott cantor.2 at osu.edu
Tue Mar 12 11:54:28 EDT 2013


On 3/12/13 10:08 AM, "Rod Widdowson" <rdw at steadingsoftware.com> wrote:
>
>I have documented it, and my proposed solution at the bottom of
>https://wiki.shibboleth.net/confluence/display/IDP30/Attribute+Filtering+E
>ng
>ine  ("Separating <PolicyRequirementRule/> from <AttributeRule/>")

The solution proposed is the bridging classes?

>Although this is written up as if it has been implemented the work has
>only
>been partially done (enough that I am happy that it works).  So now is a
>good time to demur if you disagree.  I'd be particularly interested in
>Scott's input since the SP shared the same filtering language and
>therefore
>has had to address the same issues.

My code is just implementing both paradigms in each plugin, and I factored
code into helper methods where I needed to. Plus I don't configure plugins
from outside, I self-configure them.

I would say the concern about the Spring configuration is valid. Anything
can be done, but I know Tom was trying to avoid custom parsers. It's
pretty custom I think to do the parsing in a context-sensitive manner
based on the parent element or whatever.

-- Scott




More information about the dev mailing list