[xacml] Problem Statement for "Condition Reference"

["Michiharu Kudoh" <KUDO@jp.ibm.com>]

This is a concrete problem statement for the XACML 1.1 work item titled
"condition reference".

The current XACML spec provides sufficient set of primitives for specifying
conditional expressions. However, there is no way to refer to it. In other
words, even if there is only one condition is needed in the system (e.g.
access is allowed in weekday from 9 to 20) that is used in thousands of
rules, the identical conditions must be specified in each rule repeatedly.

If there is a way to group or catalogue condition expression in XACML and
allows each rule to refer to, a rule specification becomes much more
concise and it facilitates policy administration. In some sense, it is just
like <PolicySetIdRefernece> and <PolicyIdReference>.

Therefore, XACML schema definition should support some way to support
condition reference.

Michiharu Kudo