[xacml] attribute references and indeterminate results

[Anne Anderson <Anne.Anderson@Sun.com>]

v14 of the spec, right under the rule evaluation table, on page
20 (in my copy) the last paragraph ends:

  "If any attribute value referenced in the condition cannot be
   obtained, then the condition evaluates Indeterminate."

Shouldn't this be something like:

  "If any attribute value that must be obtained in order to
   evaluate a condition cannot be obtained, then the condition
   evaluates Indeterminate."

This allows for an OR function to be based on an attribute value
that can be obtained, even some attribute values for other
elements in the OR can not be obtained.

Anne
-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692