Policies vs. Rules

Hi all,

I have a question about Policies and Rules.

I really do not see the reason to distinguish between Policy and Rule. In my opinion, everything that you can solve with a Policy that has multiple rules, can also be solved with multiple Policies (where each only has one single Rule).
The only difference that I see between Rules and Policies are that they map to different target sets. Meaning that a Rule maps to DENY or PERMIT and a Policy to DENY, PERMIT and NOT_APPLICABLE (I left away INDETERMINATE). But I really do not see a practical application for this difference.
Maybe you could give me a hint about what the intent is behind Policies and Rules?

I heard that there is a requirement for Rules.

Could anybody tell me what the requirement for Rules is?

Regards,

Florian

xacml-comment message