[xacml-comment] policy and rule ordering

[Paul Andrews <paandrew@cisco.com>]

I have an observation to make regarding the order of evaluation of policies
and rules within a policy set:

The order is only defined for one rule combining algorithm, however if
individual policies within a policy set had obligations associated with them
it is possible (likely even) that the obligations should be executed in a
specific order.