All,
I still fail to see why this is useful.
If you take a policy template, and replace each <Parameter>
with an appropriate <AttributeDesignator>, then you get a
regular XACML policy, and the PEP/PDP can "fill in" the "template"
at runtime using normal XACML attributes.
Why do we need a new standard? In particular I would be opposed to
"implementation option C", that is a PDP would construct the
policy from the template at runtime. That's lots of heavy
machinery for no gain.
Best regards,
Erik
On 2012-09-20 20:25, Danny Thorpe wrote: