RE: [xacml] XACML Profile for Hierarchical Resources, WD 8

["Daniel Engovatov" <dengovatov@bea.com>]

I agree.  Any reasonable implementation will do it the right way anyway,
and policies do not depend on it.  Let's not break anything accidentally
at this point.

Thank you.

Daniel;

>I made no changes for this, and also did not add any comments
>about "don't compute ancestors by recursively computing parents".
>The Profile does not say how to compute the "resource-ancestor"
>or "resource-ancestor-or-self" attribute.  The current semantic
>description precludes multiple instances of the same normative
>identity of any node in a "resource-ancestor" or
>"resource-ancestor-or-self" attribute, so I would rather minimize
>the changes at this point, and not start introducing
>implementation notes.  I think the current semantic description
>is sufficient.