Re: [xacml] subjects (fwd)

[Anne Anderson <Anne.Anderson@Sun.com>]

On 4 November, Polar Humenn writes: Re: [xacml] subjects (fwd)
 > I think the answer to your question, is that Multiple Subject matches must
 > match any subject and they are not related to each other. That is one
 > SubjectMatch has nothing to do with the subjects matched in another.
 > 
 > The SubjectMatch with a SubjectAttributeDesignator matches on a restricted
 > set of subjects.

<response warning="following comes from a fried brain">
But all matches within a single <Target><Subject> must pertain to
one Request <Subject>.  If you want to specify subject matches
that are not related to that <Subject>, then you use another
<Subject> element in your <Target>.
</response>
-- 
Anne H. Anderson             Email: Anne.Anderson@Sun.COM
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311     Tel: 781/442-0928
Burlington, MA 01803-0902 USA  Fax: 781/442-1692