ISSUE: Resource attribute on AuthZDecisionStatement

["Eve L. Maler" <eve.maler@sun.com>]

Has anyone got enough experience with AuthZDecisionStatements to say 
whether the Resource attribute has been working for them?  I know of one 
case where someone is extending it to include multiple resources and to 
use a non-URI method of identifying them.  I'm wondering if we should 
consider doing something similar, and possibly including resource types 
as a formal extension point (with a ResourceFormat, maybe).

If this suggestion provokes a lot of interest, maybe it's something we 
can consider in 1.1.  If not, maybe we can put it on the V2.0 discussion 
list or drop it entirely.

	Eve
-- 
Eve Maler                                        +1 781 442 3190
Sun Microsystems                            cell +1 781 354 9441
Web Technologies and Standards               eve.maler @ sun.com