Provide mechanisms to extend Governance and Permissions files without breaking interoperability
Source: Real-Time Innovations ( Gerardo Pardo-Castellote)
The specification does not state what to do when Permissions and Governance files contain "extra elements" that are not valid according to the XSD.
This is expected to occur both as a result of vendor extensions as well as due to additions in future versions of DDS Security.
Allowing these extensions/additions without breaking compatibility is important. So the spec should be clear in that they are allowed and also provide rules/guidelines on them.
- Simply state that elements that are not expected/understood should be ignored
- Same as above but provide some structure for those elements. E.g. specify that they must have a "vendorId" attribute (used to avoid collisions) and a "mustUnderstand" attribute used to force failure in some cases.
- Define an "extensions" element that has known structure (e.g. name/value pairs) which is the one used for the extensions.
- Others to be proposed.
Common approaches are described here: http://www.ibm.com/developerworks/library/x-xtendschema/
This document also discusses various approaches: https://www.xml.com/pub/a/2004/10/27/extend.html
Reported: DDS-SECURITY 1.0b1 — Sat, 20 Feb 2016 01:36 GMT
Updated: Thu, 13 Oct 2022 01:25 GMT
- DDSSEC11-10 Extend Governance and Permissions files.docx 17 kB (application/vnd.openxmlformats-officedocument.wordprocessingml.document)