Question re: XACML PEP

Hello Group,

 

Can any of you please tell me how, in our 2012 RSA demonstration of the XACML IP Profile, how the Policy Enforcement Point (PEP) was able to read resource metadata, to make an access control decision?  Was the resource file actually being
 opened in order to read the metadata?   How is the metadata visible to the PEP?

 

Thanks so much!

 

Crystal Hayes, CCEP 

Boeing Intellectual Property Management 

(206) 713-2928