[xacml] mulitple subjects clarification

[Simon Godik <simon@godik.com>]

Ann, I would like to get clarification for mulitple subjects semantics.

 

1. There may be more than 1 <subject> of the same category in the request context.

true:false

 

2. Sequence of <SubjectMatch>'es under //Target/Subject refers to one and only one <subject> element in the request context.

true:false

 

3. If subject-match is satisfied by some <subject> element in the request context, does it mean that

subject-designator in the condition portion of the rule must be satisfied with the same <subject> element?

 

Simon