xacml — archive

[System]

It may or may not be a bank balance. That it is even a balance is somewhat immaterial, it is just intended as a concrete example of an attribute that may be associated with a requestor, the resolution of which is required to make a policy decision regarding the use of a resource. The resource itself may also have attributes associated with it that are referenced in a policy. (What a mouthful! Which is why I try to use concrete examples!)The choice of which attributes to use within policy statements is entirely up to the entity defining the policy. BTW, the above is what I intend and desire, it is not necessarily what will be the requirements that are established by the XACML group. >