Profile

Has the meeting code changed ? I did not find anyone on the call today. Regards, Anil

As a related strand - how does the PEP determine what attributes it must pass in a request to the PDP ? For apparently, the applicability of policies may vary with what attributes are present in the request. Regards, Anil

Assuming the PEP uses digital signatures in SAML wrapped XACML (or for that matter SSL) as a means to authenticate with the PDP and to protect the integrity of the request, would it ever be a possible case where the attributes in the request have not been validated as legitimate by the PEP ? ...

Craig, the designator is a "function" by itself, only that it does not take parameters (I do not know why it should not) in the same manner as regular functions but involves the context handler. It is the context handler that communicates with PIPs for attributes and not the PDP, therefore, functions ...

Let me re-project the problem after going through the responses, I wonder if it still interests the TC. I accept the point that the attribute identifier on the designator should be all that the context handler must use but it looks like there are cases where mapping attributes to queries is after ...