RE: [xacml] default environment attributes and explicit attributes

[Rich Salz <rsalz@datapower.com>]

> Is not *-one-and-only just guarantee you that there is exactly one value
> in a bag?  What would you do with two values for current-time?

That's the question.

> then tests 016 018 and 020 fail, because the request message
> includes a time, and the policies do time-one-and-only.

My feeling is the test is wrong, the current-time must come from the
environment and cannot come from the request message.

	/r$

-- 
Rich Salz                  Chief Security Architect
DataPower Technology       http://www.datapower.com
XS40 XML Security Gateway  http://www.datapower.com/products/xs40.html