Re: [xacml] RE: policy model, part 1

Michiharu,

I agree with renaming <policy> to something else like <constraints>
and renaming <policyStatement> to <rule>. Elements for any subject and
any resource are also needed. I also agree that <policyStatement> is a
collection of <rule>s.

I think predicates are put under <resources>, <subjects>, <actions> to
designate certain
attribute expressions as targets. For example, if I want to use subject
attribute 'administrator'
as a target, I put predicate expression administrator=true under <subjects>.

Simon