Re: [xacml-users] Help on Condition ? <-- Obligations

Hi Oleg.

> Is it complinat with XACML model if I return a "show-deny-reason"
> obligation that would contain explanation in plain English why the
> access has been denied?

This is definitely valid. Actually, this very use-case is being discussed
right now by the TC. Do you want to express this kind of logic in a
policy? Do you have any specific requirements that you'd like to share?


seth