Skip to content

docs(access-rules): clarify the purpose of ATTRIBUTES #104

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Martin187187 wants to merge 1 commit into
base: IDTA-01004-3-2_Working
Choose a base branch
from
Open

docs(access-rules): clarify the purpose of ATTRIBUTES #104

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion documentation/IDTA-01004/modules/ROOT/pages/access-rule-model.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -255,7 +255,7 @@ Table <<table-acl>> describes the details of <ACL>.
|Description

|ATTRIBUTES:
| List of ABAC attributes that the access control list depends on. The list contains definitions for individual attributes or pre-defined attribute groups introduced with DEFATTRIBUTES. Attributes are described in <<attributes,Attributes>>.
| List of ABAC attributes that the access control list depends on. The list contains definitions for individual attributes or pre-defined attribute groups introduced with DEFATTRIBUTES. Attributes are described in <<attributes,Attributes>>. The explicit list communicates which subject attributes an ACL requires, allowing the PIP or token issuer to determine the required claims without parsing the FORMULA. It is not a declaration list for every operand: server-provided GLOBAL operands and model REFERENCE operands may be used directly in the FORMULA without being repeated in ATTRIBUTES.

|RIGHTS:
| Enumeration of access rights subject to this access control list. Table <<table-rights-to-verbs>> describes the possible access rights, their semantics, and how they apply to the interface operations defined by the AAS API xref:bibliography.adoc#bib2[[2\]].
Expand Down
1 change: 1 addition & 0 deletions documentation/IDTA-01004/modules/ROOT/pages/changelog.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,6 +19,7 @@ Bugfixes:

Minor Changes:

* Clarified that ATTRIBUTES communicates required subject claims to the PIP or token issuer without declaring every GLOBAL or REFERENCE operand used by a FORMULA [#97](https://github.com/admin-shell-io/aas-specs-security/issues/97).
* Improved documentation of access rule examples
* new access rule examples for DPP related rules, access rule 10 updated to better reflect the purpose

Expand Down
Loading