add restriction when add and superset_of can be combined

openid · Oct 30, 2024 · 4dd0e8d · 4dd0e8d
1 parent 657084f
commit 4dd0e8d
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/openid-federation-1_0.xml b/openid-federation-1_0.xml
@@ -2177,7 +2177,11 @@
                     <spanx style="verb">subset_of</spanx>.
                   </t>
                   <t>
-                    MAY be combined with <spanx style="verb">superset_of</spanx>.
+                    MAY be combined with <spanx style="verb">superset_of</spanx>,
+                    in which case the result of applying the 
+                    <spanx style="verb">add</spanx> operator
+                    MUST be a superset of the values of
+                    <spanx style="verb">superset_of</spanx>.
                   </t>
                   <t>
                     MAY be combined with <spanx style="verb">essential</spanx>.
@@ -2418,7 +2422,11 @@
                 Combination with other operators in a metadata parameter policy:
                 <list style="symbols">
                   <t>
-                    MAY be combined with <spanx style="verb">add</spanx>.
+                    MAY be combined with <spanx style="verb">add</spanx>, in
+                    which case the result of applying the 
+                    <spanx style="verb">add</spanx> operator
+                    MUST be a superset of the values of
+                    <spanx style="verb">superset_of</spanx>.
                   </t>
                   <t>
                     MAY be combined with <spanx style="verb">default</spanx>, in