It may or may not be a bank balance. That it is even a balance is somewhat
immaterial, it is just intended as a concrete example of an attribute that
may be associated with a requestor, the resolution of which is required to
make a policy decision regarding the use of a resource. The resource itself
may also have attributes associated with it that are referenced in a policy.
(What a mouthful! Which is why I try to use concrete examples!)The choice of
which attributes to use within policy statements is entirely up to the
entity defining the policy.
BTW, the above is what I intend and desire, it is not necessarily what will
be the requirements that are established by the XACML group.
>
