Re: [xml-dev] Blended Authentication (AKA "Granular Access Control")

> For particular purposes on a particular occasion and expert
> process ('Joe' in our ongoing example) should access sources from which it
> is authorized to retrieve

I can feel the breeze from the handwave way over here.

HOW is this authorization and authentication done? Joe does a RESTful 
GET to Fred.  How does Fred decide whether to return the data or not?
	/r$