Re: [xacml] Note regarding 2-stage digital access policy development

rich: (after mtg (was struggling w internet connection, ow would have brought up)):

    experience w openaz showed that there needs to be "easier" ways to represent
     policies than pure xml-based xacml. openaz was not the first nor only project
     to come to this conclusion, but it is an example w which I am very familiar.

    however, rather than to replace xacml, what has been found is that it is reasonable
     to come up w representational subsets of xacml, or what might be considered
     a "domain-specific" representation or "profile" of xacml.

    what one may then do is develop a parser of the simplified language that will
     translate the profile into pure xacml.

    this enables us to maintain a domain-independent representation of policy that
     addresses all domains rather than being constrained by some domain-specific
     requirement for which pure xacml may not be effectively optimized.