On 4 November, Polar Humenn writes: Re: [xacml] subjects (fwd)
> I think the answer to your question, is that Multiple Subject matches must
> match any subject and they are not related to each other. That is one
> SubjectMatch has nothing to do with the subjects matched in another.
>
> The SubjectMatch with a SubjectAttributeDesignator matches on a restricted
> set of subjects.
<response warning="following comes from a fried brain">
But all matches within a single <Target><Subject> must pertain to
one Request <Subject>. If you want to specify subject matches
that are not related to that <Subject>, then you use another
<Subject> element in your <Target>.
</response>
--
Anne H. Anderson Email:
Sun Microsystems Laboratories
1 Network Drive,UBUR02-311 Tel: 781/442-0928
Burlington, MA 01803-0902 USA Fax: 781/442-1692
