Re: [xacml] Proposed Agenda for April 3 concall...

[bill parducci <bill.parducci@overxeer.com>]

10:10-10:15 Vote to accept proposed submission to SAML 2.0 work (Carlisle)

is it me, or is this confusing:

| xacml-context:Request [Optional]

|  The information used to make the authorization decision.
|  This element MUST be supplied if the
|  AuthorizationDecisionRequest "ReturnContext" attribute is
|  TRUE and MUST NOT be supplied if the
|  AuthorizationDecisionRequest "ReturnContext" attribute is
|  FALSE.  The xacml-context:Request MUST include all XACML
|  Attributes used in making the Authorization Decision,
|  whether supplied in the original AuthorizationDecisionQuery
|  or obtained from external sources.  The
|  xacml-context:Request MAY include additional XACML
|  Attributes that were not used in making the Authorization
|  Decision.

'MUST/MUST NOT' and 'optional' seem conflicting. is the intent to
indicate 'IF USED, this element MUST ...?'

b