Question re: XACML PEP

["Hayes, Crystal L" <Crystal.L.Hayes@boeing.com>]

Hello Group,

 

Can any of you please tell me how, in our 2012 RSA demonstration of the XACML IP Profile, how the Policy Enforcement Point (PEP) was able to read resource metadata, to make an access control decision?  Was the resource file actually being opened in order to read the metadata?   How is the metadata visible to the PEP?

 

Thanks so much!

 

Crystal Hayes, CCEP
Boeing Intellectual Property Management
(206) 713-2928