Re: [xacml-comment] Incomplete: behavior if <Obligations> present butnot supported

[bill parducci <bill.parducci@overxeer.com>]

do you mean the pEp? the pDp need not understand an Obligation since it is imposed upon the pEp as part of enforcement of the decision, not on the pDp as a consequence of making the decision.

e.g. 
decision: PERMIT
obligation: STRONGENCRYPT

make sense?

b

Anne Anderson wrote:

>The behavior of a PDP that does not support the optional
> element when presented with a Policy containing
> is not specified.
>
>Possible behavior: if a Policy or PolicySet is Applicable to a
>Request and the Policy or PolicySet contains , but
>the PDP does not support , that the PDP MUST return
>"Deny".
>
>Anne Anderson