10:10-10:15 Vote to accept proposed submission to SAML 2.0 work (Carlisle)
is it me, or is this confusing:
| xacml-context:Request [Optional]
| The information used to make the authorization decision.
| This element MUST be supplied if the
| AuthorizationDecisionRequest "ReturnContext" attribute is
| TRUE and MUST NOT be supplied if the
| AuthorizationDecisionRequest "ReturnContext" attribute is
| FALSE. The xacml-context:Request MUST include all XACML
| Attributes used in making the Authorization Decision,
| whether supplied in the original AuthorizationDecisionQuery
| or obtained from external sources. The
| xacml-context:Request MAY include additional XACML
| Attributes that were not used in making the Authorization
| Decision.
'MUST/MUST NOT' and 'optional' seem conflicting. is the intent to
indicate 'IF USED, this element MUST ...?'
b
