[xacml] Re: [xacml-comment] Incomplete: behavior if <Obligations>present but not supported

[Polar Humenn <polar@syr.edu>]

Why doesn't the PDP support Obligations? I thought it did. I thought the
issue was whether the PEP supported Obligations, of which I think we
solved.

Isn't it all laid out pretty well, on how the obligations are collected up
the evaluation, right?  It's in the schema, right?

I really don't like the PDP returing "Deny" for something "wrong", as if
it is taking the presumption that Deny is the "safe" answer for you.

If anything, if this really is indeed the case, I believe the "answer"
should be Intdeterminate.

Too busy at the OMG meeting,....
-Polar