XACML REST profile -- mandatory vs optional

Hi all,

Given the current mandatory vs optional part of the XACML REST profile draft:

Identifier
M/O

urn:oasis:names:tc:xacml:3.0:profile:rest:service
M

urn:oasis:names:tc:xacml:3.0:profile:rest:pdp
M

urn:oasis:names:tc:xacml:3.0:profile:rest:pap
O

It seems like there is no provision for a pure policy management endpoint; that is one that exposes the PAP profile but has no available PDP.  Is this by design?  

Regards,

Craig

-------

craig forster | technical lead, tivoli security policy manager



-------