[xacml] Proposed resolution to PM-2-05: Ensuring Completeness

[Anne Anderson <Anne.Anderson@Sun.com>]

[This proposal depends on the proposed resolution to PM-3-03 and
PM-3-03A: each PDP will have one base
<policyCombinationStatement> or <policyStatement>]

Resolution: A PDP must have a single base policy, which may be
either a <policyStatement> or a <policyCombinationStatement>.
The combiner algorithm in this base policy, together with the
tree of associated <policySet> and <ruleSet> declarations,
specifies the complete set of rules that the PDP will use in
evaluating an access decision request.

Anne
-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692