Submitter's message I added some discussion about cleaning up action history records and recommended the use of time limits to ensure cleanup. I also relaxed the restriction on the transaction-id attribute having to use the string data-type. -- Dr. Steven Legg Document Name : XACML v3.0 Separation of Duties Version 1.0 Description This specification defines a method for supporting separation of duties within XACML policies using obligations and allowing the full generality of attribute-based access control. In particular, duties are not required to be associated with subject roles. Download Latest Revision Public Download Link Submitter : Dr. Steven Legg Group : OASIS eXtensible Access Control Markup Language (XACML) TC Folder : Specifications and Working Drafts Date submitted : 2023-07-19 21:29:27 Revision : 6