Re: [xacml-users] Policy for Conformance Test IIC008 issue?

[Argyn <argyn@cox.net>]

>
> It's interesting that this is in the tests at all. The "convicted felon"  
> case is one of the connonical examples for negative rules. We're very  
> careful in XACML not to support negative policy easily, because it has  
> many problems. I'll be curious to hear who created this test, and what  
> the intended behavior is.
>

Seth

I'd like to know what is "negative rule" in XACML and the problems  
associated with it.

thanks,
Argyn