Re: [xacml] [model] Proposal of Post Condition

[bill parducci <bill@parducci.net>]

> The one strong argument for PDP-enforced post conditions I have
> heard is that certain actions should be logged by the PDP,
> showing exactly how the result was obtained.  I think this can
> probably be an implementation feature for a PDP, managed by PDP
> configuration and outside of the scope of XACML.  It is not part
> of a policy.

yes, that is my thinking as well.

b