Hi,
The tools seem fine for now, but shouldn't there be some markers or annotations present in the source spec document?
For example, take authorization, assertion 4:
<assertion required = "true" impl-spec = "false" defined-by = "technology" status = "active" testable = "true">
<id>4</id>
<description>
Each Policy provider that satisfies this contract must perform or delegate to another provider
all the permission evaluations requested via its interface in the JRE; not just those made by the container to
implement Jakarta EE security functionality.
</description>
Now in the spec document we have:
=== Requirements
. This contract must support providers that are unable to determine, before returning from `Policy.getPermissions()`,
all the permissions that pertain to a subject/protection domain.
. Each Policy provider that satisfies this contract must perform or delegate to another provider all the permission
evaluations requested via its interface in the JRE; not just those made by the container to implement
Jakarta EE security functionality.
. Each provider must export interfaces (defined by this contract) for use by containers and or container deployment
tools to create policy statements within the policy store of the provider. These interfaces must be used when an
application or module is deployed in a container.
I think the assumption is that there's a marker, annotation or tag involving "4" around the second list item. But it's not there. Meaning, the tools can't extract that paragraph automatically and put it in an XML file with the ID 4.
Now I wonder, was the original document marked in some way and didn't this marking or tag transfer, or am I just totally missing something?
Kind regards,
Arjan