DR 09-0030 - OPC: Placement of package RelationshipReference elements

[Shawn Villaron]

This is in regards to the CH defect report.  Our proposed response is as follows.

Agreed that the standard should be updated with the following clarifying annotations and definitions.  Update as follows.

Update §13.2.4.19

Add annotation: SignatureTime elements can only occur as a child of SignatureProperty as follows:

diagram

[cid:image001.png at 01CAC66A.B15681B0]

namespace

http://schemas.openxmlformats.org/package/2006/digital-signature

annotation

Holds the date/time stamp for the signature.

SignatureTime elements can only occur as a child of SignatureProperty.



Update §13.2.4.22

Add annotation: RelationshipsReference can only occur as a child of the TransformElement.  For details see its definition in §13.2.4.8 as follows:

diagram

[cid:image002.png at 01CAC66A.B15681B0]

namespace

http://schemas.openxmlformats.org/package/2006/digital-signature

attributes

Name

Type

Use

Default

Fixed

Annotation

SourceId

xsd:string

required





Specifies the value of the Id attribute of the Relationship element.



annotation

Specifies the Relationship element with the specified Id value is to be signed.

RelationshipsReference can only occur as a child element of the Transform Element (defined in §13.2.4.8) that is a Relationship Tranform.



Update §13.2.4.23

Add annotation:  RelationshipsGroupReference can only occur as a child of the TransformElement, which is defined in §13.2.4.8 as follows:

diagram

[cid:image003.png at 01CAC66A.B15681B0]

namespace

http://schemas.openxmlformats.org/package/2006/digital-signature

attributes

Name

Type

Use

Default

Fixed

Annotation

SourceType

xsd:anyURI

required





Specifies the value of the Type attribute of Relationship elements.



annotation

Specifies that the group of Relationship elements with the specified Type value is to be signed.

RelationshipsGroupReference can only occur as a child element of the Transform Element (defined in §13.2.4.8) that is a Relationship Transform.



Expand the definition.  Update to §13.2.4.23 :

Format designers might permit producers to sign individual relationships in a package or the Relationships part as a whole. [O6.10] To sign a subset of relationships, the producer shall use the package-specific relationships transform. The consumer shall use the package-specific relationships transform to validate the signature when a subset of relationships are signed. [M6.25]

To filter relationships based on their IDs, RelationshipReference tag with the corresponding SourceID attribute should be added to the relationship transform element (reference 13.2.4.8) and to filter relationships based on their type, RelationshipGroupReference tag with the corresponding SourceType attribute should be added to the relationship transform element. The transform filters the contents of the Relationships part to include only relationships that have Id values matching the specified SourceId values or Type values matching the specified SourceType values.

A producer shall not specify more than one relationship transform for a particular relationships part. A consumer shall treat the presence of more than one relationship transform for a particular relationships part as an error. [M6.35]



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.vse.cz/pipermail/sc34wg4/attachments/20100318/9d1ba43c/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 1361 bytes
Desc: image001.png
URL: <http://mailman.vse.cz/pipermail/sc34wg4/attachments/20100318/9d1ba43c/attachment-0003.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image002.png
Type: image/png
Size: 477 bytes
Desc: image002.png
URL: <http://mailman.vse.cz/pipermail/sc34wg4/attachments/20100318/9d1ba43c/attachment-0004.png>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image003.png
Type: image/png
Size: 576 bytes
Desc: image003.png
URL: <http://mailman.vse.cz/pipermail/sc34wg4/attachments/20100318/9d1ba43c/attachment-0005.png>