> Is not *-one-and-only just guarantee you that there is exactly one value
> in a bag? What would you do with two values for current-time?
That's the question.
> then tests 016 018 and 020 fail, because the request message
> includes a time, and the policies do time-one-and-only.
My feeling is the test is wrong, the current-time must come from the
environment and cannot come from the request message.
/r$
--
Rich Salz Chief Security Architect
DataPower Technology http://www.datapower.com
XS40 XML Security Gateway http://www.datapower.com/products/xs40.html
