[xacml] pdp status element

Although I proposed Status element for the 
schema,

I think that if we view authorization as 
"proof-of-compliance"

ie: does a set of presented credentials prove that 
request complies

with a policy, I have to agree with Polar, that 
missing credential

should not raise an error but deny 
access.

 

Simon Godik