modularize attribute bundles in an AttributeFilterPolicy?

[Baron Fujimoto]

On Fri, Feb 26, 2016 at 09:43:50AM -0000, Rod Widdowson wrote:
>> Is there a way to make an IdP AttributeFilterPolicy more modular by
>> defining a named attribute bundle and then incorporating and possibly
>> supplementing it in a particular AttributeFilterPolicy? 
>
>I see exactly what you mean (and why) but No.
>
>The (implied) namespaces for attributes are already complicated enough that
>I wouldn't want to add them.
>
>For completeness I'll mention that the attribute filter language does have
>hooks to allow PolicyRequirementRules to be shared, but it was only (badly
>&) partially implemented in V2 and we have withdrawn support in V3 (it turns
>out that the semantics become almost impossible).
>
>So I'm afraid that cut & paste is your friend.
>If you feel strongly you could pop in an RFE to make PolicyRequirementRef
>work.  But it may well be a breaking change (at the edges) and so that would
>need to wait for 4.0.

Ok, thanks. I mainly wanted to make sure I wasn't missing an opportunity
to factor this out and perhaps simplify the configs. I think it would be
useful, for all the usual reasons you might want to factor something like
that out, but understand if it's not cards for the foreseeable future.

-baron
-- 
Baron Fujimoto <baron at hawaii.edu> :: UH Information Technology Services
minutas cantorum, minutas balorum, minutas carboratum desendus pantorum