[xacml] subjects

[Simon Godik <simon@godik.com>]

We have an open issue with subject designators that we want to solve asap.

There is a proposal from Polar, but I think it is too complicated for quick adoption.

 

My proposal:

a) Quick solution to vote on thrs: Keep current subject-attribute-designator element

with subject-category attribute and use it in the target and apply elements. Drop

subject-attr-desig-where. I think it will cover 95% of all cases.

 

b) Work out alternative proposal and delay voting until it is resolved

 

Simon