Re: [xacml-dev] [basic question] PEP recognizing authorized user.

It is left for you to design.

Your responses could contain an obligation that say tha the decision
is valid is for x number of minutes...

Statefulness brings its own bucketful of issues.

prakash