[xacml] problem understanding resolution for issue PM-2-06

["Beznosov, Konstantin" <Konstantin.Beznosov@Quadrasis.com>]

Title: BATCH #2: E-mail vote to close issues...

Hi,

 

I'm having a problem to understand the proposed resolution for PM-2-06:

 

===============================================

PM-2-06: Encapsulation of XACML policy (Anne)

Proposed Resolution: The XACML syntax will not contain its own
security features.  An XACML rule has no XACML-specified
encapsulation.  An XACML policyStatement or
policyCombinationStatement MAY be encapsulated in a SAML
assertion.

================================================

First, since the issue documentation in the issue list does not have the description of the issue, I'm not sure what the problem to be addressed is. Maybe this leads me to the failure to grasp the proposed resolution. Could somebody explain in plain and non-normative English what the issue is and what the proposed resolution text means?

 

Thanks

Konstantin

___________________________________________________________
 Konstantin Beznosov                     Security Architect
 Quadrasis -- We Unify Security    http://www.quadrasis.com
 Hitachi Computer Products (America), Inc.
 
 konstantin.beznosov@quadrasis.com
 http://www.beznosov.net/konstantin
 
 1601 Trapelo Road                  Phone:  781 768 5840
 Waltham, MA 02451                  Fax:   781 890 4998
___________________________________________________________