Re: [xacml] Issues 63, 71 and 77

[Erik Rissanen <erik@axiomatics.com>]

Anne Anderson - Sun Microsystems wrote:
>>
>> If there are two or more categories which are repeated, then it is an
>> error.
>
> Alternatively, we could say that the cross product of the combinations
> will be created, and each evaluated as a separate request.  Using
> simpler syntax just to illustrate:

Yes, I thought about this as well, but I couldn't think of any
meaningful use cases to it. My concern with the cross products is that
the amount of work and the size of the output increase exponentially,
meaning that it opens up a vulnerability for DoS attacks.

Regards,
Erik